User Profile

I'm trying to do some form of autofill for a WKWebview on iOS and don't want to save CC info to our servers so I was wondering if I'm allowed to save it to the keychain if the user chooses to let us. I know at least one app seems to be doing something along those lines but I wanted to know if it's against ToS.