Privacy Policy — Inqrypt

1. Who we are

Inqrypt is an independent project that offers an offline, QR-encrypted note-taking app and an informational website (inqrypt.com).

Contact: support@inqrypt.com

2. What this policy covers

• Your use of the Inqrypt mobile app (currently iOS only).
• Your visit to inqrypt.com, including the update-subscription form.
• Voluntary donations made through third-party providers.

3. Data collected

3.1 Mobile app

• The app operates entirely offline.
• It does not collect, transmit, or store any personal data, analytics, or diagnostics.
• All notes and encryption keys remain on your device.

3.2 Update-subscription form

When you subscribe for product updates we collect:

• your e-mail address (required);
• your name and any comments you choose to leave (optional).

These details are stored by our form provider Tally.so and copied to a private, access-controlled database. We use them only to send occasional e-mails about Inqrypt's progress, beta invitations, and the public release. No newsletters, no advertising, no third-party marketing. You can unsubscribe at any time via a link in every message; your address will then be deleted within 30 days.

3.3 Website analytics

inqrypt.com uses Google Analytics 4 with IP anonymisation enabled. We receive aggregated statistics about visits (browser type, approximate location, pages viewed) to understand traffic and improve the site. We do not use advertising or remarketing features.

3.4 Donations

If you support the project via Buy Me a Coffee, Stripe, PayPal, or cryptocurrency, payment is processed entirely by that service. We see only transaction metadata (amount, date, optional name/e-mail) for bookkeeping and a thank-you note.

4. Legal bases

• Consent — when you submit the update-subscription form or make a donation.
• Legitimate interest — to maintain website security and gather minimal usage statistics.
• Legal obligation — to retain accounting records for donations.

5. How we use your data

• To send beta invitations, product announcements, or security notices.
• To analyse aggregated site traffic and fix technical issues.
• To confirm and acknowledge donations.

We do not sell or rent your data, nor do we use it for advertising or profiling.

6. Sharing with third parties

Personal data is shared only with service providers who act on our behalf:

• Tally.so – hosts the update-subscription form and stores submissions.
• Google Analytics – supplies aggregated, anonymised website metrics.
• Payment processors (Buy Me a Coffee, Stripe, PayPal, relevant crypto networks) – process voluntary donations.

Each provider processes data under its own privacy policy and appropriate contractual safeguards (e.g., EU SCCs for Google).

7. Data retention

• Update-subscription entries are removed within 30 days of your unsubscribe request or the public launch of Inqrypt, whichever comes first.
• Server logs rotate every 30 days.
• Donation records may be stored for up to 7 years to meet tax requirements.

8. Security measures

• Website traffic is encrypted with TLS 1.3.
• Update-subscription data is protected by multi-factor authentication.
• The mobile app stores all keys in the device keychain / secure enclave and never uploads them.

9. Your rights

Depending on your jurisdiction (e.g., GDPR, CCPA) you may request to:

• access, correct, or delete your personal data;
• withdraw consent or object to processing;
• file a complaint with a supervisory authority.

To exercise any right, contact support@inqrypt.com. We reply within 30 days.

10. Children

Inqrypt is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided personal information, please contact us for immediate removal.

11. Changes to this policy

We may update this notice occasionally. Material changes will be announced on inqrypt.com at least 7 days before they take effect. Continued use of the site or app after an update signifies acceptance of the revised policy.