Privacy Policy

PairCipher is built so that we can't read your messages. This policy explains the small amount of data we do handle and why.

Who we are

PairCipher is operated by Yana Kalashnykova, a sole proprietorship registered in Poland, NIP 5273097461 (“we”). Contact: hello@paircipher.com.

What we never receive

• Your messages, notes or anything you encrypt or decrypt.
• Your secret keys, your PairCipher password or your recovery code.

Encryption happens on your device. Your keys are stored on your phone, locked with your password, and are never sent to us.

What we collect

• Purchase details: your email address, the Stripe payment reference, the type of purchase (pair or diary) and the date.
• License details: how many phones activated your purchase, and one-way hashes of activation and restore codes (not the codes themselves).
• Technical logs: our hosting provider keeps short-lived request logs (such as IP address and time) for security and to keep the service running.

Card details are handled by Stripe. We never see your full card number. Pair names you type stay on your phone.

Website analytics

On our website (paircipher.com, not the app at app.paircipher.com), we use Google Analytics and the Meta Pixel to understand visits and measure ads, only if you tap Accept in the cookie banner. Before that, Google receives only cookieless signals and the Meta Pixel isn't loaded. You can change your choice any time with “Cookie settings” at the bottom of the website. These tools never have access to the app, your keys or your messages.

If you accepted cookies and then buy PairCipher, our server tells Meta and Google that a purchase happened (amount, and for Meta a one-way hash of your email plus their own cookie IDs), so we can measure our ads. If you declined cookies, we don't send this.

Why we use your data

• To process your purchase and activate it on your phones (performance of a contract).
• To send your purchase email with the restore link (performance of a contract).
• To prevent fraud and keep the service secure (legitimate interest).
• To keep tax and accounting records (legal obligation).
• Analytics and ads measurement on the website (your consent).

Who processes data for us

• Stripe (payments)
• Vercel (hosting)
• Neon (database for licenses)
• Resend (purchase emails)
• Google and Meta (website analytics, only with your consent)

Some of these providers process data in the United States under appropriate safeguards.

How long we keep it

Purchase records are kept as long as required by tax and accounting law (in Poland, usually 5 years). Other data is deleted when it's no longer needed.

Your rights

You can ask to access, correct or delete your data, object to its use, or ask for a copy. Write to hello@paircipher.com. If you are in the EU, you can also complain to a data protection authority (in Poland: the President of the Personal Data Protection Office, UODO). We don't sell or share personal information as defined by California law.

Data on your phone

The app stores your locked keys, pair names and settings in your browser's storage on your device. You can erase them in the app (Delete pair, or Forgot password → Start over) or by clearing the website data.

Children

PairCipher is not intended for children under 16.

Changes

If we change this policy, we'll update the date above.