Privacy Policy

Last updated: 12 October 2026

Sealby is designed so that there is almost nothing to collect. Your content is encrypted on your device and is never readable by us. This policy explains, in plain language, exactly what data exists around Sealby, who processes it, and what your rights are. It covers the Sealby app and the sealby.app website.

Who we are

Sealby is made by Sunset Works s.r.o., a company registered in the Czech Republic. It is the company responsible for Sealby and this website — and the one to hold to every promise on this page. Reach us at hello@sealby.app.

The short version

• The app has no account and collects no personal data — no name, no email, no password.
• Your files are encrypted on your device with keys we never receive. We could not read your content even if we were compelled to.
• The app contains no analytics, no crash reporting, no advertising identifiers and no tracking code of any kind.
• If you enable iCloud sync, your own iCloud stores only an unreadable encrypted blob.
• This website sets no cookies and runs no third-party trackers. Visits are counted anonymously on our own infrastructure.
• The app has no account database, vault content or keys for us to sell, rent or lose in a breach — that is the design, not a promise.

What the app doesn’t collect

Sealby works entirely on your device. There is nothing to sign up for, so we hold no identity data. Your photos, videos, documents and notes are encrypted per file, with keys protected by your device’s Secure Enclave — they never reach us. The app sends no usage analytics and no crash reports, requests no advertising identifier, and embeds no third-party code that phones home — the only third-party code inside Sealby is open-source cryptography (such as libsodium), which never touches the network. The app connects only to Apple: to your own iCloud when you turn on backup and sync, and to the App Store to show plans, check your purchase and, now and then, show Apple’s standard rating prompt. Links you tap open our website in your browser, and the Feedback button opens your own email app. The app itself sends us nothing.

What stays on your device, and for how long

Your vaults live only on your device (and, if you enable sync, in your own iCloud as encrypted data). Retention is entirely in your hands: deleting a file, a vault, or the app removes that data from your device; the optional duress mode deliberately erases your other vaults from the device when its duress vault is opened. Because we never hold your content or keys, we cannot recover, disclose, or delete anything on your behalf — including for law enforcement. If you lose your PIN and a vault’s recovery phrase, that vault is gone for everyone, including us.

Encrypted backup & sync (optional, Premium)

If you enable Premium backup and sync, your vaults are stored and synced through your own iCloud account as encrypted blobs. Apple operates that storage under its own terms and privacy policy; the contents remain unreadable to Apple and to us because the keys never leave your devices. Turning sync off and removing the data from iCloud deletes those blobs; your recovery phrase stays only with you.

Purchases

Purchases are processed by Apple through the App Store using your Apple Account. The app checks your purchase with Apple on your device and sends us nothing. Receipts, invoices and refunds are handled by Apple under Apple’s terms.

This website

sealby.app sets no cookies, stores no identifier on your device and loads no third-party tracking scripts — no advertising pixels, no third-party analytics, no fingerprinting. The site keeps your language and theme choices and, if you install the free toolbox, its offline files. A language suggestion may appear when an English page is also available in your browser language; it never redirects you automatically. We do count how the website is used, on our own infrastructure (Cloudflare Workers Analytics Engine under our account), in a form that cannot identify you. Page visits: for each page load we record the page path, the site language, the referring website, the country of the request, the device type (phone, tablet or computer), the operating-system family and any campaign tags in the link you followed. No IP address, no cookie, no visitor ID and no browser user-agent string is stored, so we cannot recognise you across pages or visits. App Store clicks: when you tap a Download button or scan one of our QR codes, we count the click by language and by which button or code it came from, and whether it looked like a person or a bot; the App Store link carries a campaign token so that Apple can report to us, as totals only, how many installs came from which page. Free-tool usage: the browser tools count that a tool succeeded or failed and a rough size bucket — never the file, its name or its contents. All three are aggregate counts with no identifier. Browsers that send Do Not Track or Global Privacy Control are not counted at all. Our infrastructure provider (Cloudflare) also shows us page and country totals measured at the network level and, like virtually every internet service, transiently processes technical data (such as IP addresses) in its logs to deliver the site and block abuse; we do not use it to identify visitors.

For website Store buttons, we count the first interaction per page load alongside measured page loads, using only the page path, language and button label. A flag kept only in the page’s memory prevents repeat counts; it is not saved to browser storage and does not identify you. QR opens and redirect requests are counted separately and may include automated traffic.

If you email us

If you write to hello@sealby.app, we receive your email address and whatever you include in the message. We use it only to respond, we don’t add you to any list, and we delete the correspondence when it is no longer needed.

Your rights

Privacy laws such as the GDPR give you rights to access, correct, delete, and export personal data, and to object to its processing. For your vault content the honest answer is that these rights are satisfied by design: we hold nothing about you, so there is nothing for us to hand over, correct, or erase — your data answers only to you. For the little website data we do process (a support email or waitlist entry), write to hello@sealby.app and we will act on it. If you are in the EU, you also have the right to complain to your data-protection authority; for us that is the Czech Office for Personal Data Protection (ÚOOÚ).

Children

Sealby is not directed at children under 13 (the minimum age in our Terms of Use, or higher where local law says so). Since the app collects no data from anyone, it collects no data from children either.

Changes to this policy

If this policy changes, the new version appears on this page with an updated date. Material changes will be called out on this website. The policy can only get more specific about how little we collect — the no-account, no-content-access design is the product, not a phase.

Contact

Questions about privacy or a security report? Reach us at hello@sealby.app.