Privacy Policy

1. Introduction and Company Information

This Privacy Policy describes how Keypo, Inc. ("Keypo," "we," "us," or "our"), a Delaware corporation, collects, uses, and protects information in connection with the Keypo application for macOS and iOS (collectively, the "App"). By using the App, you agree to the practices described in this Privacy Policy.

Our Commitment: Keypo is designed with privacy as a foundational principle. We believe that your cryptographic keys and sensitive financial data should remain entirely under your control. This policy reflects our commitment to transparency about how we handle—or more accurately, how we do not handle—your personal information.

2. Information We Collect

2.1 Information We Do NOT Collect

Keypo does not collect, transmit, or store any personal data on Keypo-operated servers. We have no servers, databases, or backend infrastructure that receives your data. Specifically, we do not collect:

Your seed phrases, private keys, or cryptographic shares
Your wallet addresses or transaction history
Device identifiers, IP addresses, or location data
Usage analytics, telemetry, or behavioral data
Advertising identifiers or tracking information

2.2 Information Stored Locally on Your Devices

The App creates and stores certain data locally on your devices to enable its core functionality. This data never leaves your devices except as described in Sections 2.3 and 3:

Encrypted Seed Phrase Shares: Keypo uses a threshold cryptography scheme (Shamir's Secret Sharing or similar) to split your seed phrase into multiple encrypted shares. These shares are stored in the Secure Enclave on your Mac, on your YubiKey hardware token (if configured), and on your paired iPhone.

Device Pairing Information: Metadata necessary to establish secure peer-to-peer connections between your Mac and iPhone, such as device identifiers used solely for local pairing.

Application Settings: Your preferences and configuration settings for the App.

2.3 Information Stored in iCloud Keychain

To enable secure synchronization between your devices, Keypo stores certain metadata in your personal iCloud Keychain. This includes share identifiers and device association data necessary for the App to function across your devices. This data is end-to-end encrypted by Apple using keys derived from your device passcode and Apple ID credentials. Keypo cannot access, read, or decrypt this information. Apple's handling of iCloud Keychain data is governed by Apple's Privacy Policy, available at: https://www.apple.com/legal/privacy/

3. How Information Is Used

Because Keypo does not collect your data, we do not use your information for any purpose. The data stored locally on your devices is used solely by the App on your devices to:

Securely store and reconstruct your seed phrases when authorized by you
Enable secure pairing and communication between your Mac and iPhone
Maintain your application preferences and settings

4. Network Usage and Data Transmission

Keypo uses local network connectivity (peer-to-peer) solely to transfer encrypted shares between your Mac and iPhone during initial setup or recovery operations. This communication occurs directly between your devices over your local network. No data is transmitted to Keypo, any third-party servers, or the internet during these operations. All peer-to-peer transfers are encrypted end-to-end.

5. Third-Party Services

Apple iCloud Keychain: As described in Section 2.3, Keypo uses iCloud Keychain for encrypted metadata synchronization. Apple processes this data in accordance with its privacy policy.

Apple App Store: If you download Keypo from the Apple App Store, Apple may collect information about the download in accordance with its privacy practices. Keypo does not receive personally identifiable information from Apple regarding App Store downloads. We may receive aggregated, anonymized analytics through App Store Connect if you have opted into sharing analytics with app developers in your device settings.

Keypo does not integrate any third-party analytics SDKs, advertising networks, social media plugins, or other third-party code that collects user data.

6. Analytics, Tracking, and Advertising

Keypo does not include any analytics, tracking, telemetry, or advertising functionality. We do not use cookies, pixels, device fingerprinting, or any other tracking technologies. We do not share any data with advertisers or data brokers.

7. Data Retention

Because Keypo does not collect data to our servers, there is no server-side data retention. Data stored locally on your devices persists until you:

Delete the App from your device(s)
Manually delete data through the App's settings
Reset your device to factory settings

Data stored in iCloud Keychain persists until you delete it through your iCloud settings or delete the associated Keypo data through the App.

Important: Deleting the App without first exporting or backing up your seed phrase may result in permanent loss of access to your cryptocurrency assets. Please ensure you have proper backups before deleting the App.

8. Data Security

We implement robust security measures to protect your data at rest and in transit:

Secure Enclave: On supported Mac devices, cryptographic shares are stored in the Secure Enclave, a hardware-isolated security processor that protects sensitive data even if the operating system is compromised.

Hardware Token Support: Keypo supports YubiKey hardware tokens for additional share storage, providing air-gapped security for a portion of your key material.

End-to-End Encryption: All peer-to-peer transfers between your devices use end-to-end encryption.

Threshold Cryptography: Your seed phrase is split using cryptographic techniques that require multiple shares to reconstruct, meaning compromise of a single device does not expose your complete seed phrase.

9. Your Rights and Choices

Because Keypo does not collect or store your personal data on our servers, traditional data subject rights (access, correction, deletion, portability) are exercised directly through your control of your own devices. You have complete control over your data:

Access: All your data is stored on your devices and is accessible to you at any time through the App.

Deletion: You may delete your data at any time by removing the App and clearing any iCloud Keychain data.

Portability: You may export your seed phrase at any time through the App for use with other wallet software.

If you have questions about exercising your privacy rights or believe we have collected any personal data, please contact us using the information in Section 13.

10. Children's Privacy

Keypo is not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect any information from children. Because Keypo does not collect personal information from any users, there is no risk of inadvertent collection of children's data. If you believe a child has used the App, please contact us and we will assist with any concerns.

11. International Users

Keypo is designed to operate entirely on your local devices without transmitting data to external servers. As such, there are no cross-border data transfers initiated by Keypo. Data stored in iCloud Keychain may be processed by Apple in accordance with Apple's data processing practices and applicable data protection laws. Users subject to the European Union's General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), or other privacy regulations should note that Keypo's architecture—which stores all sensitive data locally and does not collect personal information—is designed to minimize privacy risks and maximize user control.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this policy
Provide notice through the App or on our website
For significant changes, provide advance notice where practicable

We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes indicates your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Keypo, Inc.
A Delaware Corporation
Email: dave@keypo.io
Website: https://keypo.io

We will respond to your inquiry within 30 days.