Privacy policy
Your code is personal. Here is where it lives, what leaves your device, and what you control.
Last updated:
The essentials: Shelf stores your library on your device and, when available, in Apple’s private iCloud database. Shelf has no separate account database, developer-operated snippet server, advertising or analytics SDK, or external AI provider. This is not a cryptographic “zero-knowledge” service: device storage, Apple’s iCloud service, selected export destinations, support email, and ordinary hosting requests are separate processing paths with their own controls and records.
Who operates Shelf
Shelf and this website are operated by Raghav Jhawar. For privacy questions or requests, contact contact@byraghav.com. This policy covers the Shelf app, its Share Extension, keyboard and widget, and this website.
Your library and iCloud
Snippet code, titles, summaries, languages, labels, collections, source links, dates, use counts, and version history are stored in the app’s local database. When iCloud is available, the main app synchronizes the library through Apple’s CloudKit private database using the Apple Account configured in iOS. Apple’s documentation describes the private database as user-specific and separate from the app’s public database; Apple controls the CloudKit service and its infrastructure.
There is no separate Shelf login, and Shelf does not ask for your Apple Account password. Apple operates iCloud and the App Store under its own privacy policy and terms. You can use Shelf locally without iCloud.
Your display name, search history, appearance preferences, and keyboard settings are local preferences. The main app and extensions share a local App Group so the keyboard and widget can access the content they need. Non-private snippet metadata may be indexed by iOS Spotlight. Private snippets are excluded from Spotlight and widgets.
On-device suggestions
Eligible devices on iOS 26 or later can use Apple’s on-device Foundation Models for summaries and label suggestions. Other devices use offline Basic suggestions. Shelf does not send your code to an external AI service or implement Private Cloud Compute. Accepted suggestions become part of your library.
The keyboard and Full Access
The Shelf keyboard needs Full Access for the shared local library and the explicit system paste control. The keyboard makes no network requests, records no host keystrokes, and does not read surrounding host text context. Clipboard reads occur only when you activate the paste control. Shelf does not maintain a clipboard history.
iOS displays its standard Full Access warning. Some secure fields and apps do not allow third-party keyboards. Your device’s own clipboard and Universal Clipboard behavior remains controlled by iOS settings.
Private snippets
The Pro vault uses device-owner authentication, such as Face ID, Touch ID, or your device passcode, to gate access. It is an access lock over the shared library, not a separately encrypted database. Explicitly unlocking private content grants a short keyboard access window. Device storage and iCloud protections are provided by Apple.
Sharing and GitHub Gists
Exporting a file or code card shares your selected content with the destination you choose. Optional Pro Gist export sends the selected code and a transient token you enter directly to GitHub, after confirmation. The token is not retained by Shelf. A secret Gist is accessible to anyone who has its link; it is not an access-controlled vault.
Shelf warns about likely credentials before relevant saves and exports. Detection cannot identify every secret. Review content before sharing. Exported files and Gists remain under the destination’s control and are not removed by deleting your Shelf library.
Purchases and diagnostics
Apple processes purchases. Shelf uses StoreKit transaction information to determine access to Pro; Shelf does not receive your payment card details. Shelf does not include an app analytics or third-party crash-reporting SDK. Its diagnostic messages do not include snippet code or tokens. Apple’s own platform diagnostics depend on your device settings.
This website, cookies, and contact
This website uses no cookies, analytics, tracking pixels, advertising scripts, local storage, account forms, or newsletter database. Its fonts and assets are served from the same host. The interactive keyboard uses sample code in temporary page memory and does not upload it. The Copy button writes only the selected example to your clipboard when you click it.
When the website is hosted, the hosting provider necessarily receives ordinary request information such as an IP address, requested URL, browser headers, and timestamps to deliver and protect the site. Server logging and retention depend on the chosen host and its configuration. These network requests do not contain your Shelf app library. We do not add application analytics to these requests.
If you choose an email link, your mail app handles the message. Information you send is used to respond to your request and retained only as needed for that conversation, support, or applicable obligations. Avoid sending passwords, tokens, or private code. Contact contact@byraghav.com to ask about support correspondence or hosting-related personal data.
Retention and deletion
Your library is retained until you delete it. In the app, open Settings → Profile → Delete All Shelf Data. After confirmation and device-owner authentication, Shelf removes local models, asks CloudKit to delete its dedicated private custom zones, and clears the local profile, recent searches, watermark preferences, and search index. Widget timelines refresh. Other appearance preferences remain local.
A cloud deletion failure is shown and can be retried; local data may already have been removed. If no iCloud account is signed in, only the device library can be deleted. Data associated with a previous iCloud account must be removed while signed into that account. Other devices receive changes as iCloud syncs.
Deleting the library does not delete your Apple Account, cancel a subscription, remove exports or Gists, or manage Apple’s platform backups. See the deletion guide. You can also export important code before deleting it.
Your choices and requests
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of personal information, and to contact your local data protection authority. Most library controls are available directly in the app because Shelf does not operate a server containing your snippets. Contact contact@byraghav.com about information processed through support or the website, and we will address the request as applicable. No privacy policy can promise that Apple, an export destination, an email provider, or a web host keeps no records; their policies and legal obligations apply to their services.
Changes to this policy
We will update this page if the app or website’s data practices change. The date above identifies the current version. Material changes will be described here.