Legal

Privacy Policy

A policy designed to read like an operating standard, not a marketing layer.

Last updated: September 30, 2025

Only the information required to operate the service is retained.

Sensitive message content is designed to remain outside normal operational access.

Premium access and paid limits are handled with minimum entitlement records, not payment personal data.

Information we collect

We keep account and service data narrow, purposeful, and connected to operation.

Username is required for account creation and identification inside the platform.
Passwords are stored using strong cryptographic hashing for authentication.
Encrypted room identifiers, settings, and operational metadata may be retained where product functionality requires them.
Premium entitlement records may include only the minimum account and subscription state needed to provide paid features such as unlimited owned rooms and unlimited stored notes.
We do not intentionally collect real names, card details, billing addresses, phone numbers, location history, or unnecessary personal profile data.

K9Crypt keeps billing data intentionally narrow and does not store payment personal data.

Premium purchases are processed through Creem. K9Crypt does not receive or store your card number, CVC, bank data, invoice name, invoice address, or other raw payment instrument details.
K9Crypt does not store your email address for billing unless another product feature separately requires it. License delivery is handled by the payment provider according to its own systems.
K9Crypt does not store the raw license key after activation. The platform keeps only the minimum non-readable state needed to verify premium access.
K9Crypt may store the minimum premium entitlement state required to operate paid access, apply room and note limits, and bind premium access to the correct account.
K9Crypt does not retain raw payment-provider event data. Processing keeps only the minimum state required to update premium access safely and avoid duplicate processing.
Billing credentials are never exposed to the browser and must remain server-side only.

Retained data supports authentication, service integrity, and abuse prevention.

Information is used to authenticate users, operate secure rooms, and maintain service integrity.
Premium entitlement data is used only to determine account plan, room limits, note limits, subscription state, activation status, cancellation state, and access to paid limits.
Limited operational data may be used to improve stability, performance, and abuse prevention.
We do not sell, rent, or share user information for advertising or marketing purposes.

System controls are designed to reduce exposure across storage, transport, and access.

K9Crypt follows a zero-knowledge direction so unencrypted messages are not available to us as part of normal operation.
Messages are protected through end-to-end encryption and secured in transit using industry-standard mechanisms.
Only minimal account and room-related data is retained where the platform requires it to function.
Premium license keys should not be shared publicly. The platform avoids logging, displaying, or retaining readable license keys where storage is required.
Security controls are designed to reduce exposure across storage, transport, and operational access.

Users can review, update, and request deletion of retained information where applicable.

Users may review, update, or remove their account information subject to service requirements.
Account deletion requests result in associated data being removed in line with operational and legal obligations.
Where applicable, users may request access to the information we retain about them.

We avoid unnecessary tracking and limit client-side storage to essential product behavior.

We avoid advertising trackers and unnecessary third-party analytics tooling.
Essential session and local storage behavior may be used for authentication, usability, premium notice preferences, and rate-limit-friendly premium status refresh behavior.
Users can clear browser data locally at any time.

External providers may support the product without receiving unnecessary user data.

Creem is used as the external payment provider for premium checkout and license delivery. Payment details are handled by Creem, not stored by K9Crypt.
K9Crypt sends only the data needed to request checkout, activate a license, cancel, resume, or sync subscription status. We do not send room message content to the payment provider.
Open-source libraries and infrastructure providers may support the service, but they are not intended to receive unnecessary user data.
External links are governed by the privacy practices of their respective destinations.
Our source code and public repositories may be hosted externally without exposing user conversation content.

Data is retained only as long as service operation, account lifecycle, and legal obligations require.

Account and room-related data is retained only as long as needed for the account lifecycle and service operation.
Premium entitlement records are retained only as long as needed to provide paid access, enforce limits, process subscription state, resolve billing disputes, and satisfy applicable operational or legal requirements.
Raw license keys and raw payment-provider event data are not intended to be retained by K9Crypt.
Message handling is designed to minimize retention of sensitive content.
When accounts are deleted, associated retained data is removed according to internal operational timelines and legal requirements.

When privacy terms change in a material way, official channels are used to communicate it.

This policy may be updated to reflect legal, operational, or product changes.
Material updates may be communicated through the platform or official channels.
For privacy questions or requests, contact privacy@k9crypt.xyz. Security concerns can be sent to security@k9crypt.xyz.

If you need clarification about privacy handling, ask directly.