kryptonite

Privacy Policy

Effective Date: August 20, 2026

This Privacy Policy governs the privacy terms of the Kryptonite mobile application (hereinafter referred to as the “Application”).

---

1. Collection and Use of Personal Data

The Kryptonite application is engineered as a fully standalone, localized cryptographic suite operating 100% offline.

• The Application DOES NOT COLLECT, STORE, LOG, or TRANSMIT your personal data, files, credentials, passwords, cryptographic keys, or text notes to any external or third-party servers.
• All data processing, chunk-based encoding, and decryption routines occur strictly locally on your mobile device within the application’s isolated workspace sandbox.

2. Device System Permissions

To facilitate low-level native cryptographic pipelines and ensure data security, the Application requests the following mandatory device system accesses:

• Camera (CAMERA): Used exclusively for reading QR codes within “The Key Ring” module to allow instantaneous, local import of 32-byte Fernet tokens into the local database. The camera sensor feed is strictly processed in temporary volatile memory; it is never saved, cached, or transmitted.
• All Files Access (MANAGE_EXTERNAL_STORAGE / READ_MEDIA): Critically required for the execution of the high-speed native C++ storage sector shredder in emergency lockdown mode (Border Crossing) and individual file encryption. This permission is utilized solely to execute on-demand encoding/decoding workflows explicitly initiated by the user on the device’s physical directories.

3. Local Hardware-Hardened Storage

The Application utilizes an internal local SQLite database architecture on the device to maintain localized logs of encrypted files (ensuring error-free structural restoration) and manage encryption key aliases. This layout container is hardware-hardened via the Android FLAG_SECURE window attribute, completely blocking unauthorized screen recordings, layout caching, system casting, and screenshots.

4. Third-Party Services, Analytics, and Advertising

To preserve total user privacy, the Application operates with zero reliance on cloud architectures. It contains:

• NO advertisements or monetization SDKs.
• NO analytical trackers or telemetry frameworks (such as Google Analytics, Firebase Analytics, Flurry, or Mixpanel).
• NO external third-party SDKs capable of monitoring user behavior, checking background processes, or compiling system telemetry.

5. Children’s Privacy

Because the Application does not collect any data from anyone—including children under the age of 13—it is fully compliant with the Children’s Online Privacy Protection Act (COPPA) and General Data Protection Regulation (GDPR) frameworks regarding youth data privacy.

6. Compliance with Global Regulations

As a purely local utility, the Application inherently complies with global privacy legislation, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), by maintaining a zero-data-collection infrastructure. Users retain absolute ownership and control over their physical cryptographic assets.

7. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as the Application’s core architecture evolves. Any modifications will become effective immediately upon the publication of the revised version on this official GitHub repository page.

---

If you have any questions regarding this offline privacy perimeter, please consult the documentation provided within the application’s release notes.