This is the screen shown before an Apple device attests for the first time. It is written for someone doing us a favour rather than for someone evaluating a vendor, so it is kept plain. It is a separate document from the Android notice because App Attest proves materially different things, and a single notice covering both would be wrong about one of them.
This app asks the Secure Enclave in your iPhone to produce a signed statement about the app itself, and sends that statement to SEVEN KG to be checked. Apple calls this App Attest. It proves that this app is the real one, unmodified, running on a real Apple device.
The app asks for no permissions at all.
Accounts are optional
You can use this app without an account. The app does not ask for your name, email address, phone number or a password, and it has nowhere to put them.
If you choose to claim this device, you link it to a SEVEN KG account you already have: you get a code on your account page at svnkg.com/account and type it in. The code works once and expires in ten minutes. From then on our record of this device is connected to that account, which holds the email address you sign in with. You can release the device from your account page at any time, which removes the link.
Your device also sends a label it made for itself, such as apple-9f4c2e18. It is a random number, not your name and not anything about your iPhone. You do not choose it, and it contains nothing about you.
What gets sent
- The App Attest statement from your iPhone, signed by Apple. It says which app produced it, which version, and whether it came from Apple’s production or development environment.
- A signature over a random number our server just generated, proving the statement was made now and not copied from somewhere else.
- The device label, and how much work the device is offering to do.
- If you claim the device: the one-time code you typed.
What does not get sent
Your location. Your contacts. Your photos, files or messages. Your call or browsing history. The list of apps you have installed. Your microphone or camera. Your Apple Account.
What this cannot tell us
App Attest is narrower than most people expect, and narrower than the equivalent on Android. From this statement we cannot tell:
- Which version of iOS you are running. App Attest reports none.
- Whether you are up to date on security updates. No patch level is reported, so an iPhone several releases behind looks identical to a current one.
- Whether your iPhone has been jailbroken. Apple describes App Attest as attesting to a key’s origin on Apple hardware running an uncompromised version of your app. That is the app and the hardware, not the operating system around them, and we checked the statement ourselves: it carries no verified-boot or boot-state claim of any kind, so a jailbroken device is not distinguished from a clean one.
- Which iPhone it is. No model, no serial number, no hardware identifier. We cannot build a picture of what devices are out there from this.
- Anything about work running on the device. The Secure Enclave holds the key; it does not run the work, and the signature covers no job.
- Anything after the moment the statement was made.
- Anything about the graphics or neural processors.
- Who is holding the iPhone.
The list is short on what we know and long on what we do not. Anyone who tells you otherwise about this kind of evidence is overselling it. If that is not what you assumed about an iPhone, you are in good company, and stopping here is a reasonable thing to do. Nothing is held against a device that leaves, and anything we already hold can be deleted by asking.
How long we keep it
We keep only the most recent statement your device made. Every time you attest, the new statement replaces the old one. We do not build up a history of your device over time.
Refusals work differently. If your device is turned away, we keep a separate note about it, and those notes add up: ten refusals mean ten notes. They are deleted after 30 days, and that deletion runs: our server clears the expired notes when it starts and on a timer after that. The schedule at svnkg.com/what-we-keep lists it.
If you stop using the app, that last statement stays until you ask us to delete it. Uninstalling does not delete it, because we have no way of knowing you uninstalled.
The part you should understand before agreeing
Your iPhone’s statement carries an identifier for the key the Secure Enclave made for this app. It is not burned into the chip, it is not your serial number, and it is not shared with any other app. It belongs to this installation of this app.
Delete the app and that key is gone for good. Install it again and your iPhone makes a new one, and we have no way to connect the new one to the old. That is a real difference from the Android version of this app, where the identifier survives even a factory reset.
While the app is installed, that identifier is stable, which is how we tell your device from someone else’s. SEVEN KG does not keep it in readable form. It is scrambled with a secret key held on our server before it is stored, so anyone who stole our database would get something they cannot unscramble or look up.
SEVEN KG holds the secret key, so we can always tell it is the same installation again. This is not anonymity. It means a thief who takes our database learns nothing useful from it.
What you get, and what you owe
We are not asking anything of you beyond letting your iPhone make this statement. You are not agreeing to run anyone’s work on your device, to leave the app installed, or to keep taking part. You can stop at any time and you do not need to tell us why. There is no payment attached to this. If that ever changes, we will ask you again rather than assume.
If your iPhone cannot do it
Some devices cannot produce this kind of signed statement. If yours cannot, the app will tell you so and record that fact and a short reason. We do not try to identify the device some other way instead. A device that cannot prove itself stays unproven, which is still an answer.
What that note contains depends on how far your device got.
Turned away early, before your device identified itself: the note describes the kind of evidence and why we said no, and there is nothing in it that points back to a device.
Turned away later, after your device had identified itself: the note also contains the scrambled identifier described, so repeated refusals from one installation can be recognized as one installation. We keep that deliberately, because a check that fails the same way on the same device twenty times is a different finding from twenty devices failing once.
We use refusal notes for one purpose: research and development — finding where our own checks might be wrong, and publishing what we learn about hardware. We do not sell you data.
Deleting your records
Write to privacy@svnkg.com and tell us which device. You do not need to give a reason and we will not ask for one. We will confirm when it is done, within 30 days.
An unclaimed device is not linked to anyone, so we cannot look it up from your name or email. Tell us the device label the app shows you. If you claimed the device, write from the email address on that account, or release the device yourself on your account page.
Who we are
SEVEN KG LLC, a limited liability company registered in Kansas, United States, Business ID 10090770. 4601 E. Douglas STE 150, Wichita, Kansas 67218. privacy@svnkg.com
Our verification server is in Germany. Unless you are there, the statement your device makes is checked in a country other than your own.
Your rights
We rely on your agreement to this notice as our basis for processing, and this device keeps a record that you gave it.
Wherever you live, you have the right to be told what we do with your information, to see what we hold, to have it corrected, to object, and to have it deleted. Write to privacy@svnkg.com.
Your country may also give you further rights and a regulator you can complain to. The Privacy Policy names the authorities that apply and is kept current.
The full Privacy Policy is at svnkg.com/privacy