Privacy
Draft — pending counsel review. This text describes the current implementation and will be replaced by the reviewed version before the external beta.
Draft — pending counsel review. This text describes the current implementation and will be replaced by the reviewed version before the external beta.
What we store
- On your device: your encrypted vault, its encrypted per-record shadow, your settings, and — if you enter one on the Account page — an e-mail address kept locally.
- On our server, only if you enable sync: ciphertext envelopes of your vault, device identifiers and pairing state. We cannot decrypt them.
- Server logs: request method, path without query string, HTTP status, duration and a 6-character device-id prefix. No bodies, no tokens, no full identifiers.
What we do not do
- We do not read, sell, profile or share the contents of your vault. We cannot.
- We do not run analytics or advertising on the app or this website.
- We do not contact you unless you write to us first.
Third parties
- Google Fonts serves the Geist typeface to the app and this website (your IP address reaches Google when the font loads).
- The sync relay runs on Fly.io with a Postgres database on Supabase; both hold ciphertext only.
Your rights
- Your data is in your hands by construction: export it, delete it (Settings → Wipe all data), or stop syncing at any time.
- For anything else, write to us at the address below.