We collect nothing

This is a short page, because the honest answer is short: MyKey has no account, no sign-in, and no server. The app makes no network calls at all — this is checked by automated tests in every release.

What that means, point by point

• Your passwords are encrypted on your device with a key made from your master password. That key never leaves your device. We have no copy of your password, your recovery words, or your vault.
• No analytics, no tracking, no telemetry. The app does not report usage, crashes, or anything else to us or to anyone.
• Sync travels through a cloud folder you chose, as an encrypted file. Your cloud provider sees that a file exists, its size, and when it changed — never its contents.
• The Android app does not even request the internet permission.
• This website is a set of static pages. It sets no cookies and runs no trackers.
• Buying a licence: when checkout is open, payments are processed by Paddle as merchant of record. We receive your email address (to send your licence key) and the purchase details our licence records need — never your card details.
• Emailing support is the one time we see anything about you, and it is the email you chose to send.

Check it yourself

The full transport audit — every path your data can move along, what protects it, and what a cloud provider can and cannot see — is published with the app: TRANSPORT_SECURITY.md. The source code is public for inspection: desktop and phone/web.

Privacy questions: info@aimlds.org.