Legal
Privacy Policy
Last updated 8 August 2026
Who we are
Keyfold is operated by Lioncap Ventures (Private) Limited, 5031 Crowhill Views, Harare, Zimbabwe, a Lioncap Ventures product. For privacy questions, contact [email protected].
What we cannot see
Keyfold is a zero-knowledge password manager. Your passwords, cards, notes, and keys are encrypted on your own device before they reach our servers, using a key derived from your master password and your Secret Key. We never receive either secret in a usable form, so we cannot read the contents of your vault. A full compromise of our infrastructure would expose only ciphertext.
What we do process
To operate the service we process a limited set of account and technical data: your sign-in email, a hash of your authentication key, device records (name, platform, last-seen time, IP), and the encrypted blobs that make up your vault. We use this only to authenticate you, sync your encrypted data, send security notifications, and keep the service running.
Where your data lives
Your encrypted data is hosted in Zimbabwe. Keyfold can also be self-hosted on infrastructure you control, in which case the operator of that deployment is the data controller for your account.
Email and notifications
We send transactional email such as address verification, new-device alerts, and account notices through Postmark. We do not send marketing email without your consent.
Your rights
You may request access to, correction of, or deletion of the account data we hold. Because we cannot decrypt your vault, deletion of your account removes the ciphertext we store. To exercise any right, contact [email protected].
Changes
We will post any changes to this policy on this page and update the date above.