Privacy
The claims on this page are checkable. That is the only kind worth making.
Our products page argues that a privacy policy is a promise about data a company already holds, and that the Iron suite is built so the data never arrives. This page is where that argument has to survive specifics — including the places where an app does talk to the network, and who is on the other end.
Effective September 17, 2026.
Ironwire Technologies, LLC
6545 Market Ave. North, Canton, OH 44721, United States
The short version
No Ironwire application has an account system. None of them asks for your name, email address, or phone number. None of them contains analytics, crash reporting, advertising identifiers, or a third-party SDK that performs any of those. We operate no server that receives data from any app in the suite, so there is no database anywhere with your usage in it.
| App | Platforms | Personal data collected | What leaves the device |
|---|---|---|---|
| IronKeyboard | Android | Nothing | Nothing. The INTERNET permission is not declared, so the OS cannot open a socket for it. |
| IronTime | macOS | Nothing | Nothing. There is no networking code in the binary. |
| IronBlocker | Android, macOS | Nothing about you | Blocklist downloads from four public providers, and — on Android — non-blocked DNS queries to the upstream resolver you choose. See below. |
IronKeyboard (Android)
IronKeyboard is an input method. It sees every character you type, which is what makes it the app in this suite with the most to prove.
It collects nothing and transmits nothing. The mechanism is not a policy choice we could quietly reverse: the INTERNET permission is not declared in the app's manifest, and Android enforces that at the kernel level. The app cannot open a network socket. You can verify this on an installed build without trusting us:
adb shell dumpsys package tech.ironwire.ironkeyboard | grep -i internetThat command returns nothing, because there is nothing to return.
Keystrokes, words, and corrections
The word dictionary ships inside the app as a bundled asset. Suggestions and autocorrect are computed on the device against that file. Words you teach the keyboard to stop correcting are stored on the device only. Nothing is sent anywhere for prediction, personalization, or model training — there is no channel over which it could be.
In password and other sensitive text fields, suggestions, key previews and autocorrect are all disabled.
Microphone and voice typing
IronKeyboard declares RECORD_AUDIO for its voice typing feature. The speech recognition model is a Vosk model bundled in the app and executed on your device's CPU. Audio is processed in memory, converted to text, and discarded. No recording is written to storage and no audio is transmitted — again, the app has no network access to transmit it over.
The permission is requested only when you open the IronKeyboard app and grant it deliberately. An input method cannot request permissions for itself, so voice typing simply does not function until you do. Declining it leaves every other feature working.
Backups
Android's automatic backup is disabled for this app (allowBackup="false"). Nothing IronKeyboard stores is copied to your Google account.
IronBlocker (Android and macOS)
IronBlocker blocks ads and trackers by filtering DNS. This is the app in the suite that genuinely uses the network, and the section below is deliberately specific about what that means. Two separate things happen, and only the second one is about your browsing.
1. Blocklist downloads — both platforms
The app downloads domain blocklists from four public providers and stores them on your device:
- Steven Black Unified —
raw.githubusercontent.com - Hagezi Multi PRO (Android only) —
raw.githubusercontent.com - Peter Lowe's Ad List —
pgl.yoyo.org - AdGuard DNS Filter —
adguardteam.github.io
These are ordinary HTTPS requests for public text files. They carry no identifier, no account, and nothing about you — but as with any web request, the provider's server necessarily observes your IP address and the fact that a download occurred. Those providers are independent of Ironwire and operate under their own policies. Blocking itself works offline: a cold start reads the list already on disk.
2. DNS resolution — Android
On Android, IronBlocker uses VpnService to create a loopback tunnel that exists entirely on your device. There is no remote VPN endpoint and no server of ours in the path. Only UDP port 53 is routed into the tunnel; all of your other traffic takes its normal route and is never seen by the app.
For each DNS query, IronBlocker checks the domain against your blocklists and whitelist locally. Blocked domains are answered on the device and go no further.
Queries that are not blocked are forwarded to an upstream DNS resolver, which by default is Cloudflare at 1.1.1.1. That resolver receives the domain being looked up and your IP address, exactly as a DNS resolver does. We say this plainly because it is the one place where the suite's general claim needs qualifying: Ironwire never receives your queries, but the resolver you are using does, and by default that is a third party rather than your network's own.
The upstream resolver is configurable in Settings → Upstream DNS. Set it to your router, your ISP's resolver, a self-hosted resolver, or any other address you prefer. Cloudflare is a default, not a requirement, and Cloudflare's handling of the queries it receives is governed by Cloudflare's policies, not ours.
3. The query log — Android
The dashboard shows recent DNS activity. That log is a local SQLite database holding one row per query: the domain, whether it was blocked, and a timestamp. It contains no personal identifiers.
Entries are deleted automatically after seven days, and you can clear the log at any time. Uninstalling the app removes the database with it. The log is never transmitted; there is nowhere for it to go.
4. macOS
The Mac app writes blocked domains into /etc/hosts, pointed at 0.0.0.0, inside a clearly marked block. It does not proxy or observe DNS, keeps no query log, and requires your administrator password each time blocking is enabled or disabled. Uninstall instructions including how to remove the /etc/hosts block are in the app's documentation.
Notifications and startup
On Android the app runs a foreground service while blocking is active, which Android requires to show a persistent notification — that is the operating system telling you a VPN is running, and it is working as intended. The app can optionally resume blocking after a reboot. Neither involves any data collection.
IronTime (macOS)
IronTime opens no network connections of any kind. It has no account, no sync, no analytics and no crash reporting, and it carries zero third-party dependencies, so nothing in the dependency tree can introduce one. Your time entries, clients, projects and invoices are files on your Mac. Apple's App Privacy label for it reads Data Not Collected, literally.
Applications not yet released
IronTransfer and IronArchive are in build and are not distributed to the public. IronArchive is designed around end-to-end encryption performed on the client, with cloud storage holding ciphertext only and keys never leaving your devices — but it does involve accounts and remote storage, and it will get its own disclosure in this policy before it ships rather than being retrofitted into the claims above.
This website
ironwiretech.com is a statically exported site. It sets no advertising or tracking cookies and embeds no third-party analytics or advertising scripts. Fonts are served through Google Fonts, which means Google's servers observe requests for font files.
If you use the contact form or email us, we receive what you send — your name, your email address, and your message — and we use it to reply to you and for no other purpose. We do not sell it, rent it, or add it to a marketing list. Standard server logs kept by our hosting provider include IP addresses and are retained only as long as needed for security and operations.
Your choices, and deletion
Because the apps hold no data on our side, there is no account to close and no deletion request to file with us. Deleting data means what it ordinarily means on your own device: clear the IronBlocker query log, revoke the microphone permission, or uninstall the app, which removes its local storage.
For anything you have sent us directly — a contact form submission or an email — write to hello@ironwiretech.com and we will delete it. If you are in a jurisdiction granting you rights of access, correction, portability or erasure, the same address is where to exercise them, and the honest answer in most cases will be that we hold nothing to return.
Children
None of these applications is directed at children, and none collects personal information from anyone, including children under 13.
Security
The strongest security property here is architectural: data we never receive cannot be breached, subpoenaed, or sold in an acquisition. On the device, apps store their data in Android and macOS application-private storage protected by the operating system. Release builds are signed; Android release keys are held offline and macOS builds are signed with an Apple Developer ID and notarized.
Disclosure we could be compelled to make
We would comply with a valid legal order, and it is worth stating what that would actually produce. For the Iron suite, there is no usage data, no query history, no keystroke record and no account information in our possession to hand over, because none of it is ever sent to us. A demand for it would be answered with nothing. If we are ever compelled in a way that changes what we can say here, this page changes with it.
Changes to this policy
Material changes are reflected here with a new effective date, and the corresponding app store disclosures are updated in the same pass. We do not narrow a privacy property in an update without saying so.
Contact
Ironwire Technologies, LLC
6545 Market Ave. North, Canton, OH 44721, United States
hello@ironwiretech.com