Privacy Policy

Last updated: 2026-03-12

What we collect

Your RSA public key and email address are stored on the SecureCrypt chain - publicly readable. File contents are encrypted locally before upload and we cannot decrypt them. Payment information is handled entirely by Paddle; we receive only a subscription status event.

What we do not collect

We do not collect browsing behaviour, crash reports without consent, or any analytics. Error reporting (GlitchTip) is opt-in via the app settings and contains no file data.

Data retention

Blockchain records are permanent by design - that is the audit guarantee. Encrypted files in R2 are deleted when you delete them from the app. Your local encryption keys never leave your device.

Contact

Questions: privacy@securecrypt.app