API Guard: Octoshield

API Guard: Octoshield is a security tool that detects leaked API keys, secrets, and sensitive tokens in your code projects and configuration files.

• No Cloud Operations: Scanned code snippets, texts, or detected keys are never uploaded to remote servers.
• Local Execution: All search, regex matching, and AI/entropy-based detection algorithms run locally on your device's processor.
• Offline Operations: Scans can be executed entirely offline, physically preventing your sensitive data from leaking to the outside world.

Our application is designed around the “Privacy by Design” principle:

• API Keys: No API keys tested or detected in your files are ever collected, recorded, or monitored by the developer or any third party.
• Personal Information: We do not request, collect, or store any personal data such as names, emails, phone numbers, or hardware identifiers (UDID).
• File Access: Files or directories you authorize for scanning are read strictly during the active scanning session. These file references are securely wiped from memory (RAM) once the scan finishes.

We leverage Apple's native security frameworks to maximize device-level data security:

• Apple Keychain: Any custom scan rules or configuration profiles you choose to save are stored within iOS/macOS hardware-encrypted Keychain storage. This storage cannot be accessed by other apps or unauthorized individuals without your explicit biometric (Face ID/Touch ID) or passcode authentication.
• Ephemeral Memory: Scan data is processed entirely in RAM without writing to disk cache. When the app is closed or backgrounded, this memory is automatically freed by the operating system.

API Guard: Octoshield does not share any data for commercial or advertising purposes:

• No Ad Networks or Tracking SDKs: Our app does not integrate Google AdMob, Facebook SDK, or any marketing, user profiling, or tracking software.
• Apple Diagnostics & Crash Logs: Only standard anonymous diagnostic and crash logs may be sent to us via Apple's built-in, opt-in developer console. These reports contain absolutely no code content or personal data and are used solely to improve application stability.

Since all configurations and scan preferences are stored locally on your device, you maintain full control:

• Resetting Data: Uninstalling the app from your device automatically deletes all associated Keychain values, local caches, and preferences.
• No Remote Database: Because we store zero data on remote servers, there is no database record to request, modify, or delete.