Frequently asked questions

No. Hollowport runs entirely on the iPhone as an on-device Network Extension — no laptop tether, no manually configuring a Wi-Fi proxy, no separate cert-install dance on a second device. Install it, trust the certificate once, and you're capturing.

HTTPS is encrypted end-to-end by design — decrypting it to show you the actual content requires your device to trust a certificate authority that can see it, the same requirement every HTTPS-inspecting tool has, on any platform. See How to Use for the exact steps.

The certificate's private key is generated on your device and stored in its Keychain, specifically excluded from iCloud Keychain sync and from unencrypted backups — it never leaves the device, and Hollowport never routes your traffic through a remote server. You're in full control: remove the profile any time under Settings → General → VPN & Device Management, and decryption stops immediately.

Most app traffic, yes. The one exception is certificate-pinned traffic — banking apps, and Apple's own push notifications and iCloud Private Relay — which is visible at the connection level (you'll see it happened, when, and to where) but can't be decrypted. That's a platform limit no on-device tool can get around, not something specific to Hollowport.

Running an on-device Network Extension does use some extra battery and CPU while it's active, the same as any VPN-based tool. Tap Stop on the Capture tab when you're not actively debugging, and it's off.

No. There's no account and no server — captured traffic stays in an on-device database and is never uploaded anywhere. See the Privacy Policy for the full picture.

It runs on Apple's on-device model only — never Apple's own cloud fallback (Private Cloud Compute), never a third-party AI service. Credentials and personal data are stripped from the request before it's given to the model.

On your own device, you're in full control of what you trust. On a company-managed device, installing a VPN configuration or a custom certificate authority may be restricted by your organization's policy, or may need your IT admin's approval — check with them first if Start Capture doesn't work.

Tap Stop on the Capture tab to end the current session. To remove trust entirely, delete the profile under Settings → General → VPN & Device Management on your device — the standard way to remove any installed configuration profile.

Not currently — it's built specifically around Apple's on-device Network Extension framework, and there's no Android version planned right now.

Not currently — the source isn't public right now.

Pricing hasn't been finalized yet. Join the waitlist on the home page and we'll let you know at launch.

Email hollowport@hevexa.net or use the contact form above — we read every message ourselves.