Overview
Lokah is a web browser for iPhone and iPad, built by ARRcade. A browser sees a great deal about you by its nature, which is exactly why this policy matters: everything Lokah sees stays on your device.
There is no ARRcade account, no ARRcade server, no advertising and no analytics or tracking SDK of any kind in the app. Lokah is free, with no in-app purchases.
ARRcade never sees a page you open, a search you type, a file you save or a URL you download from. Your tabs, history, bookmarks, cookies and downloads live on your device. Ad blocking runs on device against a list bundled inside the app. There is no server to send anything to.
What We Collect
ARRcade collects nothing. There is no analytics SDK, no advertising network and no third-party crash reporter in Lokah. Here is the full picture:
| Data Type | Collected? | Accessible to ARRcade? |
|---|---|---|
| Personal information | Not Collected | No |
| Usage analytics or telemetry | Not Collected | No |
| Location data and device identifiers | Not Collected | No |
| Browsing history, tabs and bookmarks | On Device Only | No |
| Cookies and website data | On Device Only | No |
| Downloads and the files you save | On Device Only | No |
| Search terms typed in the address bar | Sent to Your Search Engine | No — see Search below |
Your Browsing Data Stays on the Device
Tabs, history, bookmarks, cookies, downloads and the files themselves are stored on your device and nowhere else. Lokah has nothing to sync them to.
- Private tabs use an ephemeral store that keeps nothing — no history, no cookies, no cache once the tab is gone.
- One switch in Settings turns history recording off everywhere, not just in private tabs.
- You can clear history, cookies and website data yourself at any time.
Downloads & Files
Downloads go directly from the website to your device. No ARRcade server sees a URL or a file. There is no download proxy, no queue held in the cloud and no record kept anywhere but on your device.
Everything you save is visible under Files › On My iPhone › Lokah, so you can move, rename, share or remove it at any time without going through Lokah at all. Deleting the app removes everything it stored.
Search
When you type something into the address bar that is not a web address, Lokah passes it to the search engine you have chosen — Google, DuckDuckGo, Bing or Brave. That query goes to that engine and is subject to its privacy policy, not ours. ARRcade is not involved and receives nothing.
| Search engine | Privacy Policy |
|---|---|
| policies.google.com/privacy | |
| DuckDuckGo | duckduckgo.com/privacy |
| Bing | privacy.microsoft.com/privacystatement |
| Brave Search | brave.com/privacy |
Ad & Pop-up Blocking
Lokah’s ad and pop-up blocking runs entirely on your device, against a rule list bundled inside the app.
- No browsing data is sent anywhere for blocking. The rules are applied locally, by the system, before a request leaves the device.
- There is no blocklist server to phone home to. The list ships with the app and is updated only when the app itself is updated.
- No page you visit is reported, scored or logged by ARRcade.
Permissions
Lokah declares two permissions. Both are asked for only when you use the feature that needs them, and both are optional in practice — decline either and the rest of the app works normally.
- Photos (add only) — “Lokah saves images and videos you download to your Photos library when you ask it to.” It is an add-only permission: Lokah never reads your photo library for its own purposes.
- Face ID — “Lokah uses Face ID to unlock the app and the Private folder.” Biometric matching happens in the Secure Enclave; the app only receives a yes or a no. Lokah never sees, stores or transmits your face or fingerprint data.
Lokah does not request your camera, microphone, contacts, calendar or location. Websites you visit may request permissions of their own — those prompts come from the system and are answered per site.
The Private Folder
The Private folder is a file-system guarantee, not a checkbox. Files moved into it are stored outside the app’s Documents folder, with complete data protection.
- Encrypted at rest and unreadable while the device is locked.
- Excluded from backups.
- Hidden from the Files app and from Spotlight.
- Opening it requires Face ID, Touch ID or your device passcode.
Private files are not uploaded, mirrored or escrowed anywhere. If you delete the app, they go with it — there is no copy held by ARRcade, because ARRcade never had one.
Websites You Visit
This is the part a browser’s privacy policy has to say plainly: the websites you open in Lokah are third parties, and they have their own privacy policies. When you load a page, that site — and whatever it embeds — can see your IP address, your request and anything you choose to type into it, exactly as it would in any other browser.
Lokah’s blocking reduces what ad and tracking networks can do, but it cannot make a site you are using stop being a site you are using. Read the policy of any site you sign in to or send information through. ARRcade has no relationship with those sites and receives nothing from them.
App Store-Supplied Data
Lokah is distributed through the App Store. Apple receives standard anonymous app metrics — crash reports, app launch counts and aggregate usage data — from all apps distributed through their platforms. ARRcade has access to these aggregated, anonymised metrics through App Store Connect, but has no access to any information that identifies an individual user through these channels.
For details on what Apple collects, see Apple’s Privacy Policy.
Your Rights
Because ARRcade holds no personal data about you, you are already in complete control at all times.
- Access: there is no personal data to access — ARRcade holds none.
- Deletion: clear your history, cookies and downloads from inside the app, or delete files directly under Files › On My iPhone › Lokah. Deleting the app removes everything it stored.
- Portability: your downloads are ordinary files in the Files app — copy them anywhere you like.
For users in the European Economic Area, this design means your GDPR rights are inherently satisfied — no request to us is required, because no personal data is processed by ARRcade. The websites you visit, your chosen search engine and Apple are independent controllers for the data they hold; consult their policies for your rights with respect to them.
For California residents: Lokah does not sell personal information, so CCPA opt-out rights do not apply. There is no personal information to sell.
Children’s Privacy
Lokah is a general-purpose web browser and is not directed at children under 13. We do not knowingly collect personal information from children. Because Lokah collects no personal data from anyone, this is inherently satisfied. Note that the open web is not age-restricted — parents should use Screen Time and the device’s own content restrictions.
Changes to This Policy
If we make material changes to this Privacy Policy, we will update the date at the top of this page and note the change in the accompanying app update on the App Store.
Given Lokah’s architecture — no account, no ARRcade server, no analytics and no third-party SDKs — the scope for meaningful change is narrow. Any change that introduced data collection would require explicit, informed opt-in before it took effect.
Contact
Questions about this Privacy Policy or how Lokah handles data? We are happy to help.