Privacy Policy for Keyvessa

The controller for the Keyvessa app is Tom Silas Helmke, c/o Online-Impressum #4746, Europaring 90, 53757 Sankt Augustin, Germany. Contact: tshfm78@gmail.com. The full provider details are in the legal notice.

This policy describes processing inside the Keyvessa iPhone app. Visiting the tommsel.com website is separate and is described in the general tommsel.com privacy policy.

Keyvessa is in development and not yet available on the App Store. This policy describes the current state of development and will be checked against the final behavior of the app before release.

Keyvessa has no user account and no registration. There is no Tommsel backend and no cloud database of its own for your personal content. Keyvessa does not transmit your personal vault content to Tommsel servers and does not upload it for analysis or storage.

The following can be stored on your device: photos, videos and files you import, library metadata, thumbnails, app settings and the cryptographic information needed to access your vault. This data stays on your device and is neither viewed nor received by Tommsel.

Keyvessa stores the private library locally in encrypted form. This includes thumbnails, and video playback is designed for encrypted content. Keyvessa does not promise absolute protection. Security also depends on your device, your operating system and how you handle recovery information. More details are on the Keyvessa security page.

Keys and recovery material are generated locally on your device. Tommsel holds no server-side copy and cannot retrieve lost recovery information from a user account. There is no server-side password reset system.

You can back up a recovery set to keep recovery information outside the device. A QR based presentation is part of the current state of development, and the exact backup formats will be settled before release. A backed up recovery set is sensitive: anyone who gains access to it may be able to gain access to your vault. You are responsible for storing it safely.

You choose which content you add to Keyvessa through the iOS photo picker or file picker. Keyvessa does not automatically search your entire photo library or file system. With system pickers, iOS may create temporary local copies or download content from an iCloud or Files provider you use onto the device. Keyvessa operates no upload service of its own for this. Originals in your Photos app or Files location remain until you delete them there yourself.

Content only leaves Keyvessa when you deliberately export it. When you export content or share it through the iOS share sheet, the exported copy leaves the protected area of Keyvessa. The privacy and security terms of the location or service you then choose apply to it.

Apple may process data under its own terms in connection with the App Store, the operating system, the file picker and the photo picker. Tommsel has no control over this processing. In addition, iOS device or iCloud backups may contain app data, depending on your system settings. Check these settings in iOS.

Keyvessa contains no advertising, no tracking of its own and no analytics SDKs. This statement refers to the app. It will be checked against the final source code and the dependencies used before release.

Tommsel does not retain your vault content, so on the Tommsel side there is no retention period and nothing Tommsel could delete for you. Retention and deletion are up to you. You can delete local content with the existing functions of the app. Deleting the app removes its local data from the device as far as iOS provides for app data. You must delete exported copies outside Keyvessa separately at their respective location. iOS device or iCloud backups may still contain data until they are replaced or deleted according to your system settings.

When you visit tommsel.com, including hosting and technically necessary server logs, the general tommsel.com privacy policy applies. This processing is separate from processing inside the app. If you write to us by email, we process the details in your message in order to answer it.

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw a given consent with effect for the future. You have the right to lodge a complaint with a data protection supervisory authority, for example with the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW). Because Tommsel does not technically hold your vault content, Tommsel cannot hand it over. You manage it yourself in the app. You send privacy requests to tshfm78@gmail.com. Please do not send recovery information, QR codes or private content by email.

Last updated: October 28, 2026. It refers to the development status of Keyvessa at that time. It will be updated if features or data processing change, and it will be checked against the final state of the app before release.