Privacy Policy

Last updated: April 7, 2026

Overview

KeyScribe is an offline-first encrypted notes app for Android. Your privacy is fundamental to how KeyScribe is built — not an afterthought.

Data Collection

KeyScribe does not collect, transmit, or store any user data on external servers.

Data Storage

All data is stored locally on your device:

Encryption

Every note is encrypted before being saved. Each note gets a unique AES-256-GCM key, which is then wrapped with your RSA-2048 public key. The private key never leaves the Android Keystore hardware module.

Data Sharing

KeyScribe allows you to share encrypted notes as .cnote files. These files are encrypted with the recipient's public key before sharing. The sharing mechanism uses Android's built-in share sheet — KeyScribe does not operate any servers for file transfer.

Backup & Restore

Backups are password-protected using PBKDF2-SHA256 (100,000 iterations) + AES-256-GCM. Backup files are created locally and you control where they are stored.

Permissions

KeyScribe requests only the minimum permissions necessary:

Third-Party Services

KeyScribe does not integrate with any third-party services, SDKs, or APIs.

Children's Privacy

KeyScribe is not directed at children under 13. The app does not knowingly collect any personal information from anyone.

Changes to This Policy

Any updates to this privacy policy will be reflected on this page with an updated date.

Contact

If you have questions about this privacy policy, you can reach out via email at elmehdielfatihi1111@gmail.com.