Privacy & data protection

Privacy Policy for SMIME Toolkit

Last updated: January 27, 2026

SMIME Toolkit helps you generate S/MIME identities on iOS. It creates keys on-device, builds a CSR, and requests a signed certificate from smimetoolkit.com. This policy explains what data is processed and how it is used.

SMIME Toolkit icon

Summary

We do not access your Mail messages. Your private key stays on-device. We receive only what is required to issue a certificate.

Information we collect

To issue a certificate, the service processes limited data.

  • Email address you enter
  • Certificate Signing Request (CSR)
  • Certificate serial number
  • Request ID and timestamps
  • CSR fingerprint (hash)
  • Revocation records if used

Information we do not collect

SMIME Toolkit does not collect or access:

  • Mail content or attachments
  • Contacts, calendars, messages, or files
  • Location or GPS data
  • Photos, audio, or video
  • Advertising identifiers (IDFA/IDFV)
  • Analytics or tracking data
  • Payment data (handled by Apple)
  • Device browsing activity

On-device processing

Your private key is generated and stored on-device in the iOS Keychain. It is never sent to the server. Your data leaves the device only when you explicitly export and share your identity.

How we use the data

We use the CSR and email address solely to validate the request and issue the certificate. Issuance metadata is logged for security, auditing, and troubleshooting.

No third-party SDKs or tracking

  • No advertising SDKs
  • No analytics SDKs
  • No profiling or tracking technologies
  • No data brokers

User-controlled storage

Any exported identity or certificate is stored only where you choose (Files, iCloud Drive, or share targets). MidState does not receive those files.

Children's privacy

This app is not directed to children. It is intended for organizations and individuals that manage certificate issuance. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy for legal or technical reasons. The effective date above will always reflect the latest version.

Contact us

MidState Agency LC, d.b.a., "MidState Software Company"
Email: contactus@smimetoolkit.com
Website: https://smimetoolkit.com/

Policy links