Krypt · Privacy Policy

Privacy
Policy.

Krypt is designed to minimise data collection. Your vault content stays on your device. We do not collect, transmit, store, or access your passwords, notes, files, photos, or authentication codes.

Last updated: 28 June 2026

1. Introduction

This Privacy Policy explains how Epic Software Pty Ltd (“Epic Software”, “we”, “us”, or “our”) handles information when you use Krypt (the “Service”).

Krypt is an offline private vault for iPhone. The Service is designed so that vault data remains locally on your device and is not sent to our servers.

2. Information We Collect

2.1 User Content stored locally

Krypt allows you to store sensitive information such as passwords, notes, files, photos, documents, and authentication codes (“User Content”).

Your User Content is stored locally on your device. We do not collect, access, view, transmit, or store your User Content on our servers.

You retain full control over your User Content at all times.

2.2 Encrypted backups you create

Krypt may allow you to export encrypted backup files. Backup files are created only when you choose to create them.

We do not receive, store, host, or recover backup files. You are responsible for storing backup files safely and remembering any backup password or credentials required to restore them.

2.3 Payment information

All purchases, subscriptions, renewals, refunds, and cancellations are handled by Apple through the App Store.

We do not collect or store your payment card details.

2.4 Email support

If you contact us by email, we will receive the information you choose to include in that message, such as your email address and the content of your request.

Please do not send passwords, vault exports, recovery phrases, private files, or other sensitive vault content by email.

3. How We Use Information

We use information you voluntarily provide, such as support emails, only to respond to your request and provide support.

We do not sell, rent, or share personal data for advertising purposes.

We do not use your vault content for analytics, profiling, advertising, training, or any other purpose because we do not have access to it.

4. Data Storage and Security

User Content remains on your device and is protected by Krypt’s local security design and your device’s security features.

No system is completely secure. You are responsible for maintaining the security of your device, PINs, passwords, biometric settings, and backup files.

If your device is lost, damaged, reset, compromised, or deleted without a usable backup, your vault data may be permanently lost.

5. Data Retention

User Content remains on your device until you delete it or delete the app.

We do not retain User Content on our servers.

Support emails may be retained as part of normal email records unless you request deletion, subject to legal or operational requirements.

6. Third-Party Services

Krypt purchases are processed by Apple through the App Store. Apple’s handling of payment and subscription information is governed by Apple’s own privacy policy and terms.

Krypt does not use third-party services to process your vault content.

7. Children’s Privacy

Krypt is not intended for children under 13, or the minimum legal age required in your jurisdiction.

We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will be available on our website. Continued use of Krypt after changes are published indicates acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy, contact:

developer@epicsoft.store

Epic Software Pty Ltd
Queensland, Australia

Krypt — The vault that lives entirely on your device
0102030405
The vault that lives entirely on your device · Released 2026

Your secrets stay
secret — even from us.

Krypt is a fully offline encrypted vault for passwords, files, 2FA codes, and notes. No cloud, no sync, no servers. Everything is encrypted on your device with AES-256 and never leaves it. Including a decoy vault that opens with a different PIN — for when "unlock your phone" isn't a request.

Download on the App Store
v1.2.2 Free to start · Pro from $1.99/mo
Requires iOS 17.6+ · Available worldwide
Why offline matters

No server means
no breach.

Every cloud vault is a target. Krypt removes the target entirely. Your data never touches a server — not ours, not Apple's, not anyone's.

✕
No servers Nothing to hack. Nothing to subpoena. Nothing to breach.
✕
No cloud sync Your vault lives on your device. Period.
✕
No account required No email, no signup, no identity linked to your vault.
✕
No analytics or telemetry We don't know how you use Krypt. We don't want to.
✕
No internet permission Verify it yourself: iOS Settings → Krypt. Zero network access.
✕
No iCloud backup of keys Encryption keys are device-bound and excluded from backups.
→
Two PINs · Two vaults

Same app.
Different truth.

The decoy vault is Krypt's most distinctive feature. One PIN opens your real vault — the other opens a believable fake that looks just as full. The two are visually identical. The real one stays hidden, even when someone is watching.

Krypt PIN unlock
Real PIN — your data
Krypt PIN unlock
Decoy PIN — what they see
Six things to know

Built for people who actually read
privacy policies.

01

Nothing leaves
your device.

Krypt has no servers, no sync, no analytics, no telemetry. We never see your data because there's nowhere for it to go. Even iCloud backups are excluded — encryption keys stay device-bound.

02

AES-256
encryption.

Authenticated encryption with PBKDF2-SHA256 key derivation at 310,000 iterations. The same standard banks and governments use.

a4f8b2c9 d3e1f7a6 b8c4e2d9
7f3a1b8e c5d9a2f4 e8b3c1d7
2a9f4d8c 1e7b3a5f 9c2e4d1b
6f8a3c1e 4d7b2a9f 3c8e1d5a
03

Passwords. Files. 2FA. Notes. One vault.

Stop juggling apps. Krypt holds your passwords, your TOTP codes, your encrypted documents, and your private notes — all behind a single PIN, all encrypted with the same vault key. Import existing data via OTP-auth URI or QR code.

04

Decoy vault.

A second PIN opens an entirely separate vault that looks just as legitimate. For coercion, border crossings, or peace of mind.

05

Auto-lock
+ Face ID.

Configurable lockout after inactivity. Face ID for fast unlock when you choose. Increasing penalties for wrong PIN attempts. After 10 failures: total wipe.

06

Offline by default.
Portable when you need it.

Krypt never syncs automatically. When you want a copy elsewhere, create an encrypted backup and move it yourself. No background uploads. No automatic synchronization. You decide when data moves.

vs the alternatives

Cloud password managers
keep getting breached.

LastPass. Norton. 23andMe. The list grows every year. The fundamental problem isn't bad implementation — it's that storing your secrets on someone else's servers means trusting that someone else's security forever.

Krypt
Cloud managers
Local-only apps
Data leaves device
✕ Never
✓ Always
✕ Never
Vulnerable to server breach
✕ No server
✓ Yes
✕ No server
Decoy / duress mode
✓ Yes
✕ Rare
✕ No
2FA codes built-in
✓ Yes
✓ Some
✕ No
File / document storage
✓ Yes
✓ Some
✕ Rarely
Free tier without account
✓ Yes
✕ Account required
✓ Sometimes
Compare Krypt

Krypt vs cloud password managers.

See how Krypt compares with popular password managers and authenticator apps — especially if you want local-only storage, no account, no sync, and nothing stored on someone else's server.

Krypt vs Bitwarden Offline vault vs cloud password manager. Krypt vs 1Password Local-only privacy vs account-based vaults. Krypt vs Proton Pass No account, no sync, no servers. Krypt vs Apple Passwords Private files, notes, 2FA, and decoy vaults.
From the Guides

Why Krypt is built
as a native iPhone app.

Security software benefits from fewer moving parts. Krypt is built as a small native iOS app instead of a cross-platform bundle — and that choice is part of the privacy story.

Why We Built Krypt as a Native iPhone App Smaller app. Fewer dependencies. Deeper iOS integration. Less unnecessary complexity.
Plans

Free to start.
Pro when you need it.

Monthly
$3.99
per month
  • Unlimited passwords, notes, files
  • Built-in 2FA authenticator
  • Decoy vault for plausible deniability
  • Encrypted backup export & import
  • Face ID unlock
Start 7-day trial
Most popular
Annual
$23.90
per year · save 50%
  • Everything in Monthly
  • Save $24/year vs monthly
  • Priority email support
  • 7-day free trial included
  • Cancel anytime in Settings
Start 7-day trial
Lifetime
$29.99
one-time payment
  • Everything in Annual, forever
  • One-time payment, no renewals
  • All future Pro features included
  • Pay once, own forever
  • Best long-term value
Buy lifetime

All prices in USD. Local currency conversion handled by the App Store.

Questions

Some honest answers.

If you've exported a backup to iCloud Drive, AirDrop or another location, you can restore it on a new device with your backup password. If you haven't, the data is gone — encryption keys are device-bound and never sync. Krypt always nudges you to create a backup after your first valuable item is added.

There is no recovery option, by design. After 10 wrong PIN attempts the vault wipes itself. This is the trade-off for genuine offline-first security — there's no "forgot password" link because there's no server to ask. Use a PIN you'll remember and back up your vault regularly.

Two separate apps are visible on your home screen — anyone looking can see both exist. Krypt's decoy lives inside the same app, accessed by a different PIN. From the outside there's only one app, with one icon, that opens to one vault. The fact that a second vault even exists is invisible.

No. We have no servers receiving your data, no analytics, no telemetry, no crash reporting that includes user content. Krypt has no internet permission at all — you can verify this in iOS Settings → Krypt. The encryption happens on your device with keys we never see.

Your data stays exactly where it is — on your device. Even if the app is removed from the App Store, the existing install continues to work. Export an encrypted backup anytime to keep a portable copy. Your vault doesn't depend on us being around.

Yes. The free tier includes unlimited basic password and note storage with full encryption. Pro adds the 2FA authenticator, file vault, decoy vault, encrypted backup, and a few other power features. You're not locked out of the core security — you're just choosing whether to upgrade for extras.