Privacy Policy

Last Updated: December 6, 2025

At NullKeep, we take your privacy seriously. Our zero-knowledge architecture ensures that we cannot access your sensitive data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you create an account, we collect your email address to manage your subscription and authenticate your device.
  • Payment Information: If you subscribe to our Pro plan, payment processing is handled by Stripe. We do not store your full credit card details.
  • Encrypted Data: We store encrypted blobs of your vault data (passwords, notes, etc.). Because this data is encrypted on your device before it reaches our servers, we have no way of decrypting or reading it.

1.2 Information Automatically Collected

  • Device Information: We collect basic information about the devices you use to access the Service (e.g., device name, operating system) to help you manage your authorized devices.
  • Usage Logs: We collect server logs including IP addresses and access times for security, rate limiting, and abuse prevention purposes.

2. How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain the Service.
  • To process your payments and manage your subscription.
  • To authenticate your access and prevent unauthorized use.
  • To synchronize your encrypted data across your devices.
  • To communicate with you about your account, security updates, or changes to the Service.

3. Zero-Knowledge Architecture

Our fundamental privacy commitment is based on our zero-knowledge architecture. Your master password serves as the key to encrypt and decrypt your data locally on your device. This master password is never sent to our servers. Therefore, we cannot see, share, or sell your stored passwords or notes because we simply do not have the technical ability to access them.

4. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with trusted third-party service providers only as necessary to provide the Service:

  • Stripe: For payment processing.
  • Email Service Providers: To send transactional emails (e.g., verification, alerts).

These providers are obligated to protect your data and use it only for the specific purposes for which it was disclosed.

5. Data Security

We implement robust security measures to protect your data, including HTTPS encryption for all data in transit and industry-standard server security practices. Your vault data is encrypted at rest using strong cryptographic algorithms (AES-256-GCM).

6. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request the deletion of your account and all associated data.
  • Export your encrypted data.
  • Update or correct your account information.

7. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@nullkeep.com.