Privacy & data

Only you can read your vault

Everything in your vault, including your passwords, verification codes, notes, IDs, cards, bank accounts and attachments, is end-to-end encrypted on your device before it's synced. Only you hold the keys, so only you can read it. Security model

What we collect

Only your account ID, which we use to sign you in and sync your vault across your devices.

Technical details

To sync your devices and manage your subscription, we also keep device names, when each device last signed in, when items were created or changed, and your App Store subscription status. This information is stored encrypted at rest and never reveals what's inside your vault. What our servers store

What we don't do

• We don't share your data with anyone.
• We don't sell your data, to advertisers or anyone else.
• We don't send you emails. Your account ID is only used to sign you in.
• No ads and no tracking in the app.

Deleting your account

You can delete your account from within the Citadel app.

For the full legal details, read our Privacy Policy.