Your secrets.
Yours alone.

1. Information we process

• Account information: your email address, authentication records, account identifier, confirmation state, and settings needed to create and secure your account.
• Encrypted service data: encrypted vault records, encrypted folder names, encrypted notes, encrypted media, wrapped encryption keys, and synchronization metadata such as record identifiers and timestamps.
• Device-local information: encrypted offline caches, preferences, quick-unlock material, AutoFill snapshots, and decoy-vault data may be stored locally using platform storage and security facilities.
• Service and security data: limited technical records may be generated by infrastructure providers, such as IP address, request time, device or app version, authentication events, errors, and abuse-prevention signals.
• Purchase information: where paid features are offered, Apple or payment/subscription providers may process purchases and provide us with transaction identifiers, entitlement status, and subscription status. We do not receive full payment-card details from Apple.
• Communications: information you include when contacting support, including your email address and message.

Please do not send us your Decryption Key, Recovery Key, passwords, authenticator secrets, or unencrypted vault contents.

2. How we use information

We process information to operate and secure the Services; authenticate users; synchronize encrypted data; provide storage, recovery, support, AutoFill, and subscription features; prevent abuse; troubleshoot failures; comply with law; and improve reliability. Where applicable, our legal bases include performing our contract with you, legitimate interests in securing and improving the Services, your consent, and compliance with legal obligations.

Fratera websites and applications may use cookies, secure storage, or similar technologies that are necessary for sign-in, preferences, security, and core functionality.

3. When information is shared

We may use service providers for cloud authentication, databases, encrypted object storage, email delivery, app distribution, payment processing, and subscription management. These providers process information for their respective services and under their own terms and privacy notices. Current or anticipated providers may include Supabase, Apple, RevenueCat, and Paddle, depending on the platform and features you use.

We may also disclose information when required by law, to protect users or the Services, in connection with a corporate transaction, or with your direction. We do not sell readable vault contents, and we do not use vault contents for behavioral advertising.

4. Retention and deletion

We retain account and encrypted service data while your account is active and as needed to provide the Services. When you request account deletion, we will delete or de-identify information under our control unless retention is required for security, fraud prevention, dispute resolution, or legal compliance. Residual copies may remain temporarily in encrypted backups until they age out under provider schedules.

Some device-local information remains under your control and may require deleting the app, clearing local application data, or removing platform credentials. Exported files and copies you place in Photos, Files, backups, or other services are governed by those locations.

5. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information; receive portable data; withdraw consent; or complain to a data-protection authority. Contact us to exercise a right. We may need to verify your identity before acting.

Because vault contents are encrypted and we do not possess your Decryption Key, we generally cannot inspect, recover, selectively correct, or provide readable copies of those contents. We can delete ciphertext associated with a verified account.

6. Security and international processing

We use technical and organizational safeguards appropriate to the nature of the Services, including client-side encryption, access controls, transport encryption, and restricted service credentials. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Service providers may process information in countries other than yours. Where required, we rely on lawful transfer mechanisms and provider commitments intended to protect transferred personal information.

7. Children

The Services are not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children who cannot lawfully consent. Contact us if you believe a child has provided information improperly.

8. Policy changes

We may update this Privacy Policy as the Services or legal requirements change. We will post the revised version with a new “last updated” date and provide additional notice when required.

1. Eligibility and accounts

You must be legally able to enter into these Terms. You are responsible for accurate account information, safeguarding account credentials, securing your devices, and all activity performed through your account. Notify us promptly if you suspect unauthorized access.

2. License and ownership

Subject to these Terms and any applicable app-store EULA, Fratera grants you a limited, non-exclusive, non-transferable, revocable license to use the Services for lawful personal or internal business purposes. Fratera and its licensors retain all rights in the Services, software, branding, and documentation not expressly granted to you.

You retain ownership of information you place in your vault. You authorize us to host, transmit, and process its encrypted form only as needed to provide the Services.

3. Your encryption and recovery responsibilities

You are responsible for remembering and protecting your Decryption Key and for storing recovery material securely. Because Fratera does not receive the Decryption Key, we may be unable to recover readable vault contents if you lose both the key and usable recovery material. Hidden Vault data may intentionally have more limited recovery options.

4. Acceptable use

You may not use the Services to violate law or third-party rights; distribute malware; attack, probe, overload, or bypass the Services; gain unauthorized access; interfere with another user; resell access without permission; or reverse engineer the Services except where applicable law expressly permits it. You may not use the Services to store or distribute material that is unlawful to possess.

5. Third-party and platform services

The Services rely on or interoperate with third-party platforms. Their services are governed by their own terms. Apple is not responsible for providing maintenance or support for NullKey except as required by the Apple Standard EULA or applicable law. Questions, complaints, and claims concerning NullKey should be directed to Fratera using the contact information below.

6. Paid features

If paid plans are offered, prices, features, billing periods, and renewal terms will be shown before purchase. Purchases made through Apple are billed and managed by Apple and are subject to Apple’s purchase, cancellation, and refund rules. You can manage an Apple subscription through your Apple ID settings. Except where required by law or platform rules, fees are non-refundable.

7. Service changes and availability

We may update, modify, suspend, or discontinue features to improve security, comply with law, respond to provider changes, or operate the Services. We aim to provide a reliable service but do not guarantee uninterrupted availability, permanent storage, or compatibility with every device or third-party service. Maintain appropriate recovery material and exports for data you cannot afford to lose.

8. Termination

You may stop using the Services at any time and may request account deletion. We may suspend or terminate access if you materially breach these Terms, create security or legal risk, fail to pay applicable fees, or if continued service becomes unlawful. Where practical, we will provide notice and an opportunity to export encrypted data unless immediate action is necessary.

9. Disclaimers

To the maximum extent permitted by law, the Services are provided “as is” and “as available.” Fratera disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation. We do not warrant that encryption or other safeguards will prevent every loss, compromise, or attack. Mandatory consumer rights remain unaffected.

10. Limitation of liability

To the maximum extent permitted by law, Fratera will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, business, goodwill, data, recovery material, or access arising from the Services. Any aggregate liability will be limited to the greater of the amount you paid Fratera for the Services during the twelve months preceding the claim or the minimum amount required by applicable law. These limitations do not apply where liability cannot lawfully be excluded or limited.

11. Governing terms and consumer rights

These Terms are governed by the laws applicable in Fratera’s place of establishment, excluding conflict-of-law rules, unless mandatory law requires otherwise. If you are a consumer, you retain the protections and forum rights that cannot be waived under the law of your usual residence. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

12. Changes and general provisions

We may update these Terms to reflect changes to the Services, providers, or law. We will post revised Terms with an updated date and provide additional notice when required. If a provision is unenforceable, the remaining provisions continue in effect. A failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; Fratera may assign them as part of a merger, reorganization, sale, or transfer of the Services.