Privacy Policy
The short version: EnkiAdmin connects your device directly to Microsoft and Google. EnkiCube does not run servers for the app, does not receive your tenant data, and does not track you.
Who we are
EnkiAdmin is made by EnkiCube LLC, Illinois, USA (“EnkiCube”, “we”). EnkiAdmin is a professional tool for IT administrators and is not designed for or directed to children under 13. Questions about this policy: support@enkicube.com.
What the app does with data
EnkiAdmin is a tool for IT administrators. When you sign in with a Microsoft 365 or Google Workspace administrator account, the app reads and changes your organization’s directory (users, groups, licences, mailboxes, devices, sign-in logs and similar) on your instructions, using Microsoft’s and Google’s official APIs and the permissions you or your organization granted.
- Directly between your device and the provider. Requests go from your iPhone or iPad straight to Microsoft (for example graph.microsoft.com, login.microsoftonline.com, outlook.office365.com) or Google (for example googleapis.com, accounts.google.com). They do not pass through EnkiCube.
- EnkiCube never receives it. We do not collect, store, sell or share your organization’s data or the personal data of the people in your directory.
- The data and its protection are yours. Your organization remains the controller of its directory data. Microsoft’s and Google’s own privacy terms apply to their services.
What is stored on your device
- Sign-in tokens for your Microsoft and Google accounts, in the iOS Keychain, readable only by the app on this device.
- Cached directory information, so screens load quickly. It’s kept in iOS’s encrypted storage, left out of device backups, refreshed automatically, and deleted after 24 hours at most, or sooner when you sign out of that tenant or delete the app.
- App settings and App Lock. Your preferences, and the App Lock passcode, which is stored only as a salted hash in the Keychain.
- Files you export (for example a CSV report or a debug log), only when you create and share them yourself.
Signing out of a tenant removes its tokens and cached data. Deleting the app removes everything it stored on the device.
Keeping and deleting data
- There is no EnkiAdmin account. You sign in with your existing Microsoft 365 or Google Workspace account, which EnkiAdmin can’t create or delete. Everything the app stores is on your device and is deleted when you sign out (Settings › sign out of all tenants) or delete the app.
- Debug log. If you turn it on, it stays on your device, older entries are removed automatically as it grows, and it’s deleted with the app.
- Emails to us. We keep support emails only as long as we need them to help you, and delete them within 12 months after the conversation ends, or sooner if you ask.
Device permissions
The app asks for these only when you use the feature that needs them, and you can turn them off in iOS Settings at any time:
- Face ID / Touch ID: to unlock the app and confirm sensitive admin actions. Your biometric data never leaves Apple’s Secure Enclave; the app only receives a yes or no.
- Camera and LiDAR: to scan a room’s layout for the Wi-Fi heatmap. The scan stays on your device.
- Location (while using the app): only because iOS requires it before revealing the Wi-Fi network name and access point for a measurement. Your location is not recorded or sent anywhere.
- Local network: to find devices on your Wi-Fi network for the network tools. Results stay on your device.
Other services the app contacts
- Apple handles App Store purchases and subscriptions. We never see your payment details or your Apple ID. We receive only total, anonymous sales reports through App Store Connect.
- Public status pages of cloud services (for example Microsoft, Google, Zoom, Slack), to show service health. These requests carry no information about you or your organization.
- Hosts you enter yourself. The network tools (for example ping, TLS certificate checks and domain checks) connect to the addresses and domains you type in.
- Cloudflare, when you run the speed test (speed.cloudflare.com) or look up DNS records (cloudflare-dns.com).
- Google’s public icon service, to show the logos in the service-status list. These requests carry only the service’s web address.
Like any internet connection, these services see your device’s IP address. They receive nothing about you or your organization.
No tracking, analytics or ads
EnkiAdmin contains no advertising, no third-party analytics or crash-reporting SDKs, and does not track you across apps or websites. The optional debug log in Settings › Diagnostics stays on your device, masks email addresses, tokens and IDs, and leaves the device only if you choose to share it, for example with our support. Because EnkiAdmin doesn’t track you, it never shows Apple’s “Allow tracking” prompt.
If you email us
If you contact support@enkicube.com, we use your email address and what you send us only to answer you. If you send a debug log, we use it only to fix the problem and delete it when we’re done.
Removing access
- In the app: Settings › sign out of a tenant, or sign out of all tenants.
- Microsoft 365: in the Microsoft Entra admin center, go to Enterprise applications › EnkiAdmin to review or remove its permissions. Users can also check myapps.microsoft.com.
- Google Workspace: in the Google Admin console, go to Security › API controls › App access control, or check myaccount.google.com/permissions.
Google user data
EnkiAdmin’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to show and carry out the admin tasks you choose in the app. It is not transferred to EnkiCube or anyone else, and it is not used for advertising or to train AI models.
Your rights
Because we don’t hold personal data about you beyond any emails you send us, there is usually nothing for us to access, correct or delete. If you want an email conversation with us deleted, or have any other privacy request, write to support@enkicube.com. For data in your organization’s directory, contact your organization, which controls it.
Changes
If this policy changes, we’ll update it here and change the effective date above. Material changes will also be noted in the app’s release notes.