Privacy Policy

Last updated: May 12, 2026

1. Our Core Commitment

Verndr is built on zero-knowledge architecture. This means your files, health data, and personal information are encrypted on your device before they ever reach our servers. We hold only ciphertext — encrypted data that is mathematically useless without your personal encryption key, which we never possess.

2. What We Collect

Account Information

When you create an account, we collect your email address and payment information (processed by our PCI-compliant payment provider). This is the minimum required to operate your account.

Your Data

We never collect, access, or process the contents of your vault, health records, or files. All data is encrypted client-side before transmission. We store only encrypted blobs that we cannot decrypt.

Usage Data

We do not collect analytics, telemetry, usage patterns, or behavioral data. We do not use cookies for tracking. We do not employ third-party analytics services.

3. How We Use Information

Account information is used solely for:

  • Account authentication and management
  • Processing payments and subscriptions
  • Sending essential service communications (security alerts, account changes)
  • Responding to support requests you initiate

4. What We Never Do

  • Sell, rent, or trade your information to third parties
  • Use your data for advertising or marketing profiling
  • Access the contents of your encrypted vault or files
  • Share data with government agencies without valid legal process and transparency reporting
  • Employ tracking cookies or third-party analytics

5. Data Retention

Your encrypted data remains on our servers as long as your account is active. Upon account deletion, all encrypted data is permanently purged within 30 days. Account metadata (email, payment records) is retained as required by applicable law.

6. Your Rights

You have the right to access, export, and delete your data at any time through the Verndr app or Klixr CLI. Under GDPR, CCPA, and similar regulations, you also have the right to data portability, rectification, and to lodge a complaint with a supervisory authority.

7. International Data

Verndr operates servers in multiple jurisdictions. Because all data is encrypted before leaving your device, the physical location of our servers does not affect the confidentiality of your data — we hold only ciphertext regardless of jurisdiction.

8. Changes to This Policy

We will notify all registered users via email before any material changes to this policy take effect. The current version is always available at this URL.

9. Contact

For privacy-related questions: legal@verndr.com