App review guide

This page is intended for app store review teams. It provides ready-made test identities and a step-by-step scenario covering the full messaging flow.

How access works

Secret Keeper is an offline encryption utility. There are no accounts or servers: signing in means entering a BIP-39 seed phrase, from which the app derives a local key pair. Any valid seed phrase unlocks the full app - the identities below are ordinary profiles with no special privileges.

Test identities

Alice

Seed phrase (sign-in):

brisk smart throw little breeze solid sniff off lottery can almost clog

Public address:

sk1tvzr7a8cts5uvfr34fax9ndwzmrk2c58j32t8vj5773luye743msul2ez9

Bob

Seed phrase (sign-in):

harbor what tide action impulse gadget spirit staff minor machine original gate

Public address:

sk16dqaapm0gwc37zhlcfs7p7fn9lyhysmjy4ggf4j3wdgndqyfjewsr8wrsm

End-to-end check (single device)

1. Open the app, tap Sign in, paste Alice's 12-word seed phrase and tap Next. When prompted, set any PIN (e.g. 1234).
2. Add a contact: menu (three dots) → Contacts → Add contact → paste Bob's public address, name it "Bob".
3. Open the chat with Bob and send a short text message. The app encrypts it locally and shows the encrypted text in the chat; tap Copy under the message. The ciphertext travels over any channel the user prefers (email, messenger) - the app itself never transmits anything.
4. Save the copied ciphertext anywhere (e.g. a notes app), then switch to Bob: Profile → Log out → Log out and erase data (local-only wipe; a seed phrase always restores the identity). Sign in with Bob's seed phrase and set any PIN.
5. Copy the saved ciphertext to the clipboard and tap the paste icon on the Chats screen. The message is decrypted and a chat with Alice opens automatically - the sender's address is part of the encrypted envelope, so Bob does not need to add Alice manually.

Notes and file encryption

1. The first chat on the Chats screen is Notes - a private encrypted space visible only to the signed-in identity. Open it and send a text: it is stored encrypted on the device and only this identity can read it.
2. In any chat (including Notes), tap the paperclip icon and pick a file, or use the camera button to capture a photo or video. The app encrypts it into a portable .skf container; tap the encrypted message to decrypt and preview the content.
3. An encrypted backup of the whole profile (.skb) can be exported and imported in Settings → Data.

All remaining features (QR codes, address sharing, security settings) work the same way under either identity; no further credentials are needed.

User content and moderation (Guideline 1.2)

Content can appear in the app in exactly one way: the user personally receives an encrypted envelope through a channel they already use (a messenger, email, SMS), from a person to whom they had previously given their public address, and manually pastes or imports it into the app. There is no feed, no discovery, and no way for a stranger to push content into the app. The chat-like screen is a local grouping of the user's own decrypted notes by contact. On top of that, the following safeguards are built in:

• Terms (EULA): the welcome screen requires agreement to the Terms of Use (zero tolerance for objectionable content and abusive users) and the Privacy Policy before a seed phrase can be created or imported. Both documents are also linked in Settings → About.
• Flagging content: every received message has a Report action in its context menu; the report with the sender's address and the message content goes to support@secretkeeper.net. Reports are reviewed and acted on within 24 hours.
• Blocking users: the chat menu has a Block action - the conversation is deleted instantly, all future envelopes from that address are rejected, and a pre-filled report to the developer is opened. Blocked addresses are managed in Settings → Security → Blocked addresses.
• Filtering: the switch Accept from contacts only (Settings → Security) automatically rejects envelopes from any address not in the user's contacts.
• Immediate removal: any single message, a chat's history, or an entire chat can be deleted at any time; the content disappears instantly.
• Contact in the app: Settings → About → Report inappropriate content shows the moderation email directly in the app and opens a pre-filled report.

Account deletion (Guideline 5.1.1(v))

Although no account is created on the developer's side (the seed phrase is a locally generated cryptographic key), the app offers an explicit deletion flow: Settings → Security → Delete account permanently and irreversibly erases the keys, contacts, and all messages from the device and returns the app to the initial welcome screen. Since no user data ever exists outside the device, this deletion is complete and immediate.

Important

These identities exist solely for review purposes. Do not use them for real correspondence: anyone who knows a seed phrase can read messages addressed to it.