Privacy policy
Last updated 19 September 2026
If you never make an account, this app collects nothing and sends nothing. If you do make one, it holds your email address — and that is the entire list. Your files, your passwords and your recovery words never leave your phone either way.
What changed, and why this page says so
Until September 2026 this app shipped without the INTERNET
permission, and this page said that an app without it cannot open a network
connection at all. That was true, and it was the strongest thing we could
say.
The app now has an optional account, used for inviting friends and for multi-device sync when that ships, so the permission is present. The previous version of this page promised it would be updated before anything like that shipped. This is that update.
If you do not make an account
Nothing is collected and nothing is sent. No address, no identifier, no analytics, no crash reports. Every feature of the vault works offline, indefinitely, and the app never contacts us.
If you do make an account
We store, on a server we run:
- Your email address. It is how sign-in works and how an invite reward is credited to the right person.
- Who invited you, and who you invited. Needed to pay the free days to both sides.
- A random id for the app installation. Generated on your phone, meaningless outside this app, deleted when you uninstall. Its only purpose is to stop one device collecting the same invite reward through many throwaway addresses.
- How many days of sync you have.
We never receive, and the server has no column for:
- Your app passcode, or any vault password.
- Your recovery words.
- Your files, their names, their types, their sizes, or how many there are.
- Your name, your phone number, your contacts, or your location.
There is no analytics SDK, no advertising SDK and no crash reporter in the app. Sign-in uses a 6-digit code emailed to you rather than a password, so there is no account password to be stolen either.
What is stored on your phone
Your files are encrypted and stored in the app's private storage on your device. Encryption keys are derived from the password you type and held in memory only while a vault is open — never written to disk. Your passwords and recovery words are never stored anywhere, which is also why nobody, including us, can reset them or open a vault for you.
Deleting your account
The app has a Delete my account button under Settings → Account. It erases your email address from our server immediately and permanently. After that, nobody — including us, including anyone serving us a court order — can say who the account belonged to.
What remains is an anonymous record with no address on it: the invite links between accounts, and the installation id. We keep those for two reasons, stated plainly because deletion pages are where companies usually get vague. Removing them would take back free days that a different person earned, and it would make deleting and re-registering an unlimited supply of rewards. Neither record can be connected to you once the address is gone.
Your vaults and files are on your phone and are not affected. Deleting the app removes them.
If you have already uninstalled the app, you can still do it here: delete your account. It sends a code to the address to prove it is yours.
Who else sees anything
- Cloudflare runs the server and its database, on our behalf.
- Resend delivers the sign-in code email. They see the address the code is sent to.
- Apple and Google handle payment before you download, and apply their own privacy policies to it. The app contains no billing code and never sees your payment details.
We do not sell data, and there is nothing here that could be sold.
How long it is kept
Account records last until you delete the account. Sign-in codes expire after ten minutes and are removed once used. Sign-in sessions expire after 180 days.
Your rights
You can see everything we hold about you on the account screen in the app, and erase it from the same screen or from this page if the app is gone. If you would rather ask a person, email the address below.
Children
The app is not directed at children. Accounts are not intended for anyone under 13, and we do not knowingly collect an address from one.
Changes
If what we collect ever changes, this page changes first and says what changed, the way it did this time.