Turnbook privacy policy

Last Updated: November 1, 2026

Who publishes Turnbook

Turnbook is an iPhone app published by Terror LLC, an Illinois limited liability company. Questions about this policy, or about data Turnbook holds for you, go to support@terrorapps.com.

The short version

• Everything you record stays on your iPhone unless you turn on backup yourself.
• Turnbook has no advertising, no analytics, no crash reporting, no tracking and no third-party software kits.
• Backup is optional. What it sends is encrypted on your iPhone first, and the encryption key never reaches our service.
• Turnbook asks Apple for no name and no email address when you sign in.
• You can delete the backup from inside the app, and that erases our copy.

What Turnbook stores on your iPhone

When you use Turnbook it writes to your iPhone:

• units you add: the nickname and address you type, and the rooms and items in them
• for each item: the condition you mark, any note you type, and the photographs attached to it
• photographs you take in Turnbook, with the date and time your iPhone's clock reported, and photographs you pick from your photo library, marked in the report as coming from your library
• repair costs you type and the receipt photographs you attach to them
• the tenant's typed or drawn name and the image of their signature, and the date and time it was taken
• the report PDFs Turnbook builds, and amendments added after a report was finished
• app settings such as a unit's check-reminder interval and whether you have seen the welcome tour

All of it lives in the app's own data-protected storage, with file protection applied so it is unreadable while the iPhone is locked and has not been unlocked since starting. None of it is kept in iOS preference storage.

Turnbook does not read your photo library. When you add a library photograph, the system picker hands Turnbook only the pictures you selected, which is why the app needs no photo-library permission.

Permissions Turnbook asks for

• Camera. Asked for the first time you tap a capture tile during a walkthrough, never at launch. It is used only to take photographs into a report. If you decline, the walkthrough still works and you can add photographs from your library instead.
• Notifications. Asked for only at the moment you turn on a periodic check reminder for a unit. The reminder is scheduled on your iPhone and fires there. Turnbook never notifies or contacts your tenant.

Turnbook does not ask for your location, your contacts, the microphone, Face ID or Touch ID, permission to add to your photo library, or permission to track you. There is no App Tracking Transparency prompt because there is nothing to track.

Optional backup, and exactly what our service holds

Backup is off until you set it up on the Backup and restore screen. You can use every other part of Turnbook without it. If you turn it on:

• Sign in with Apple is the only way to sign in. Turnbook requests no scopes, so Apple sends the app no name and no email address, not even a relay address.
• Account identifier. Our service stores a SHA-256 hash of the identifier Apple issues for your Apple Account. The identifier itself is used once to compute that hash and is never stored or written to a log.
• Session. Your iPhone generates a random session token and keeps it in the iPhone keychain. The service stores only a SHA-256 hash of that token, so the token itself exists nowhere but your iPhone.
• Your records. Units, rooms, items, conditions, notes, photographs, costs, signatures and amendments are encrypted on your iPhone with AES-256-GCM before anything is uploaded. Reports upload when you finish them; a walkthrough in progress is not uploaded at all.
• The key. A random 32-byte key generated on your iPhone and kept as a synchronizable iCloud Keychain item, so it travels with your Apple Account to your other devices. It is never sent to our service, never written into a file or into the backup, and never logged.

Our service therefore holds: the hashed account identifier, hashed session tokens, and for each encrypted object an identifier, a short label, a revision number, a size in bytes, a SHA-256 digest and timestamps, plus encrypted bytes it has no way to open. It never receives plaintext, never receives the key, and does not log request bodies, bearer tokens or sign-in tokens.

The service runs on Cloudflare. Cloudflare carries the network connection and can see the network address a request comes from while it is serving it; Turnbook's own code does not record it. To check your sign-in, the service fetches Apple's published public keys; that request carries nothing about you.

If the key is not available on a replacement iPhone, because iCloud Keychain is off or you signed in with a different Apple Account, the backup still exists but cannot be opened. Turnbook says so plainly and changes nothing on the iPhone. We cannot open it for you.

What Turnbook declares on its App Store privacy label

One data type: User ID, linked to you, used for app functionality, not used for tracking. That is the hashed account identifier described above, and it applies only if you turn on backup. No tracking, no advertising data, no analytics, no diagnostics.

Subscriptions

Purchases are handled by Apple. Turnbook never sees your card, your Apple Account email address or your billing address. The App Store tells the app the current prices for your country and whether a subscription is active; Turnbook keeps that entitlement state on your iPhone. No price is written into the app.

How long things are kept

• On your iPhone: until you delete them. Deleted units, reports, rooms, items and photographs move to Recently deleted and stay recoverable for 30 days, after which the app purges them. Deleting something permanently before then is a separate, clearly named action.
• In the backup: until the matching record is permanently deleted on your iPhone, or until you delete the backup.
• Delete my backup, on the Backup and restore screen, erases the encrypted copies, the records describing them and every session, and signs you out. Everything on your iPhone stays exactly as it is. The same Apple Account can start a new backup afterwards.
• Deleting Turnbook from your iPhone deletes everything the app stored there, including reports and PDFs you have not shared anywhere else.

Who else sees your data

We do not sell personal information and we do not share it for advertising. The only data that leaves your iPhone through Turnbook is the encrypted backup, and only if you turn it on. Cloudflare processes those requests for us as our hosting provider. Apple processes your sign-in and your subscription under Apple's own privacy policy.

When you share a report PDF, you choose the app and the recipient in the system share sheet. From that point the PDF is in your hands and the receiving service's, not ours.

Children

Turnbook is a working tool for landlords. It is not directed at children and we do not knowingly collect anything from a child.

Your choices

• Use Turnbook with no account at all. Walkthroughs, the tenant's signature, comparison and the PDF all work without signing in.
• Decline the camera and add photographs from your library instead. The report marks them as library photographs.
• Delete the backup, sign out, delete individual records, or delete the app.
• Write to support@terrorapps.com with a question about data Turnbook holds for you, and we will answer.

Changes to this policy

If this policy changes, the new text is published on this page with a new date. A change that affects what leaves your iPhone is also called out in the app's release notes.

Contact

Terror LLC, an Illinois limited liability company. support@terrorapps.com