Last Updated: February 2026
Privacy Policy
Welcome to Safykey. Your privacy is our highest priority. This policy explains how we handle your data with the extreme security measures you expect from a premium password management service.
1. Zero-Knowledge Architecture
Safykey is built on a zero-knowledge security model. This means your master password and vault data are encrypted locally on your device before they ever reach our servers. We never have access to your raw passwords, vault content, or encryption keys.
2. Information We Collect
To provide our services, we collect limited information:
- Account Information: Your name, email address, and optional phone number used for account verification and critical security alerts.
- Encrypted Vault Data: We store the encrypted version of your vault, which only you can decrypt.
- Security Logs: Basic metadata about login attempts to protect against brute-force attacks.
3. How We Use Your Data
We use your data strictly for:
- Facilitating account access and synchronization across your devices.
- Sending critical security notifications (e.g., login from a new device).
- Improving the reliability and security performance of the Safykey platform.
4. Data Retention
We retain your encrypted data only as long as you maintain an active account. If you choose to delete your account, all associated data is permanently erased from our active servers immediately.
5. Security Measures & Entropy Analysis
We employ industry-leading AES-256-GCM encryption. Our platform includes real-time entropy analysis which ensures your passwords meet military-grade strength standards before they are even generated. This analysis is performed locally in your browser to ensure zero data leakage.
6. Your Rights (GDPR & CCPA)
We comply with global data protection standards. You have the right to access, export, or delete your data at any time through your account dashboard. Given our zero-knowledge model, we cannot recover or "reset" your vault if you lose your master password, ensuring that only you ever have access to your credentials.