Information Cabin Talk handles
Cabin Talk handles group display names, memberships, invitations and group secrets, signed messages, selected photos, delivery and read state, blocks, preferences, device public keys, and local diagnostics. Selected photos are prepared without ordinary embedded metadata. The visible content of a photo can still reveal information.
Encryption, CloudKit, and backups
Text messages sent through the public CloudKit relay are sealed end-to-end. Photos are sent only to nearby connected group devices; they enter private iCloud only if you explicitly create an Apple Account backup. Sensitive group secrets and identity keys are stored in the Keychain, while retained conversations and room-recovery records are encrypted or protected with Apple file protection. Apple processes iCloud and CloudKit data under its terms.
Permissions and sharing
Nearby communication uses Local Network access. QR invitation scanning uses the camera. Adding a photo uses Apple's system photo picker. iCloud features require an available iCloud account. Anyone who receives a valid group invitation or message may keep what they receive, so share secrets and content only with people you trust.
Retention and your controls
Local data remains until you erase it or remove the app. Cabin Talk can keep up to 20 local archives. The public relay is designed around a 30-day delivery window, although records can remain longer when creator-only CloudKit permissions limit cleanup. A private iCloud backup remains until it is replaced or deleted with the in-app control. Erasing this device does not delete a recipient's copy, and backup or relay deletion can take time to propagate through Apple services.
Website analytics
Cabin Talk's page on brentgaddis.com uses first-party, aggregate website analytics operated through Cloudflare. The site counts page views and allowlisted actions such as opening an App Store, support, or privacy link; it also keeps coarse source, country, device, browser, operating-system, engagement, performance, and reliability totals. It does not store raw event rows, visitor or session identities, IP or hashed-IP identifiers, cookie or local-storage visitor IDs, full user agents, full referrers or URLs, form contents, arbitrary text, or a person's raw click history. Country and source cells below five are suppressed, and aggregates are retained for up to 24 months. Cloudflare still processes request and network metadata as necessary to deliver and protect the site. These website measurements are separate from the app.
Questions
Contact Brent Gaddis with privacy questions about Cabin Talk.