Legal
Privacy Policy
Draft, being finalized before launch.
The short version
- Your vault is locked on your device with a key only you hold. We can't read it.
- SealNest needs no account. Your vault never comes to us.
- With a SealNest account, we keep your email address, your devices and your plan. The full list
- The breach check sends 5 characters of a scrambled fingerprint of a password, never the password.
- No ads. No trackers. No third-party AI.
- We don't sell or share your data.
- This website uses no cookies.
Who we are
SealNest is made and sold by Slade Curtis ("we" and "us" in this policy). It is offered in the United States.
To reach us, write to the address on our Support page.
SealNest is a separate app from ReelNest, which is made by the same developer. SealNest has its own accounts, separate from ReelNest.
On your device
This part applies to everyone who uses SealNest, with or without an account.
- Your vault. Everything you save in SealNest (passwords, passkeys, verification codes, Wi-Fi passwords, notes, IDs, cards and documents) is kept in a file that is encrypted with AES-256, using a key made on your device. The key is kept in your device's keychain, set to this device only, so it is not in iCloud Keychain or in your device's backups. Opening it takes Face ID, Touch ID or your device's passcode.
- Scans. When you scan a card or a document, your device reads it. If you keep the scan, it is encrypted like the rest of your vault. It goes into the encrypted backups you export, which only your passphrase opens. It is not in exported backups. It doesn't reach your other devices.
- Face ID. Your device checks your face itself. SealNest only learns whether it matched, never anything about your face.
- AutoFill. When you fill a password in another app or a website, your device asks SealNest directly. Nothing goes through us.
- The rest. Reminders, your Lost Wallet progress, what the security checks found, and your settings stay on the device.
- Your encrypted backup. A file you make, locked with a passphrase you choose, and saved where you choose, such as the Files app or iCloud Drive. We never receive it. If you keep it in iCloud Drive, Apple stores the locked file.
Without an account, none of this ever comes to us.
What leaves your device, even without an account
A few things do. Each is listed here.
The breach check
To tell you when a password you saved has appeared in a data breach, SealNest checks it against Pwned Passwords, a free public list run by Have I Been Pwned. Your device makes a scrambled fingerprint of the password (a SHA-1 hash) and sends only the first 5 of its 40 characters, asking for padding. The answer lists every leaked fingerprint that starts with those 5 characters, mixed with decoys, and your device looks for a match itself. The password, and the rest of its fingerprint, never leave your device.
Your device asks Have I Been Pwned directly, so Have I Been Pwned sees your device's internet address with the request. We receive none of it.
Your device asks our server, which asks Have I Been Pwned for it, so Have I Been Pwned sees only our server's address. Our server doesn't record the characters or your address.
The check runs when you save or change a password, and again from time to time, in the background if you turned on breach alerts. You can turn it off in SealNest's Settings, under Security.
Change-password pages
When Fix These offers to help you change a password, your device may ask that website whether it has a standard page for changing passwords. The website sees your device's internet address, as it would if you visited it.
Websites and calls
Websites you open from SealNest open in your browser. Numbers you call from Lost Wallet are dialed by your phone.
Crash reports
If you have chosen, in your device's settings, to share analytics with app developers, Apple may send us reports about SealNest crashing. They contain no vault contents.
The App Store
Apple handles downloads and updatesdownloads, updates and purchases under its own privacy policy.
If you create a SealNest account
This part applies only if you create a SealNest account, which you need for sync, sharing and the paid plans.
What we keep
- Your email address, encrypted on our servers. We use it to sign you in, and to send you sign-in codes, security notices and invitations people send you.
- When your account was made, and the last day it was used.
- Your signed-in devices: each one's name, its kind (such as iPhone or iPad), and when it was first and last used.
- Whether you've turned on an authenticator. Its secret is kept encrypted, and your account recovery codes are kept only as one-way scrambles.
- Your plan, and when it renews or ends.
- Sign-in codes on their way to you, kept as one-way scrambles and deleted within a day, and short-lived counters that stop people guessing, kept for an hour or a day.
- The security notices we've sent you, for 90 days.
We don't keep a password: SealNest accounts don't have one. Our own logs record which part of SealNest was used and whether it worked, never your email address, a code or your device's internet address.
Sync
With sync on, your vault is encrypted on your device before it is sent, with keys made from your vault key. Our servers keep this locked copy, so a new device, or your recovery code, can bring your vault back. We can't open it.
To keep your devices in step, we can see how many items your vault holds, their sizes, when each one changed and which of your devices changed it.
Device-Only. If you choose Device-Only in Settings, our servers keep each change only until all your devices have it, then delete it. There is then no copy with us to bring back.
Your vault recovery code. When you turn on sync, your device makes a 24-character recovery code for you to write down. We keep a copy of your vault key locked with that code, which we never see. Only the code opens it.
Saved scans don't sync. They stay on the device where you saved them.
Saved scans sync too, encrypted like the rest of your vault, up to 5 GB per family.
If an account goes unused. If no device signs in or syncs for 2 years, we email you a warning at 23 months, at 23 and a half months, and at 24 months. Fourteen days after the last one, we delete the locked copy of your vault from our servers. Nothing on your devices is touched, and your account itself stays until you delete it.
Sharing and Family
What you share is encrypted on your device with a key for that group, and that key is locked separately for each person in the group, with keys we don't hold. When you first share with someone, we deliver their key to your device; to be sure it really is theirs, you can compare a code with them in the app.
To make sharing work, we can see: who shares with whom, and their roles; invitations, including the email address you invited, until they are answered; when things were shared, opened and changed, and when a timed share ends; and, for a family Lost Wallet, whether a shared item is a card or an ID, not what it says.
When you invite someone, we email them from SealNest. The email names you by your email address, and names no passwords. Receipts for timed shares, and a group's Recently Deleted, are kept for 30 days.
A kid's profile is kept by a parent, inside a family vault the parent controls, so what is in it comes from the parent. A profile can be handed over to a child's own account only when the child is 13 or older.
In a Family plan, the people in the family can see who else is in it.
Share links
When you share a password, a Wi-Fi network or a note by link, your device locks it with a new key that is written only into the link, after its "#". Browsers never send that part of a link to any server, so we keep only the locked copy, and we can't open it. A passphrase you add never leaves your device either.
To make the link work, we can see: that you made a link, when, how long it works, how many times it can be opened, whether it needs a passphrase, and the time of each opening. We don't record who opened it or from what internet address. The locked copy is deleted at the last opening, when its time runs out (a week at most), or when you revoke it. Anyone who has the link (and the passphrase, if you set one) can open it until then.
Payments
Apple takes payment for Personal and Family. We never see your card or bank details. When you subscribe, renew, change plan or get a refund, Apple sends us a signed record of it: the plan, its dates and its status. Your device sends us the same record when you buy. We keep it with your account, to know which plan you have.
How we use it, and what we never do
We use what we have only to run SealNest: to sign you in, to keep your devices in step, to deliver what you share, to send the emails described here, to answer you, to keep SealNest secure and free from misuse, and to follow the law.
We never show you ads, track you across other companies' apps and websites, sell or share your information (as California law uses those words), or send any of it to an AI service.
Companies that help us run SealNest
- Cloudflare serves this website. It also runs our servers and their databases, and stores the locked copies of vaults. Every connection between the app and our servers passes through it, so it handles your device's internet address.
- Postmark (ActiveCampaign) sends our emails: sign-in codes, security notices and invitations. Its open and link tracking is switched off.
- Apple runs the App Store, takes payment for subscriptions, and sends us crash reports if you have chosen to share them, and delivers our notifications.
- Have I Been Pwned answers the breach check. It is an independent public service: we don't pay it or control it.
- Our email provider, , keeps our support inbox, so it receives the messages you send us.
Cloudflare, Postmark and our email provider handle your information only to provide their service to us, under their own data protection terms.
How long we keep things
Without an account, we keep nothing about you. If you write to us, we keep your messages for as long as we need them to help you, and delete them if you ask.
- Your account details: until you delete your account.
- The locked copy of your vault: until you delete your account or switch to Device-Only, or until the 2-year rule above applies.
- Signed-in devices: a sign-in ends after 60 days without use.
- Sign-in codes: up to a day. Counters that stop guessing: an hour or a day. Security notices: 90 days.
- Apple's messages about purchases: 30 days. The plan they set stays with your account.
- Receipts for timed shares, and a group's Recently Deleted: 30 days.
- A share link's locked copy: until it is opened for the last time, its time runs out (a week at most), or you revoke it. When it was opened: 30 days after it ends.
- Messages you send us: as long as we need them to help you. We delete them if you ask.
Deleting your account
In SealNest, open Settings, tap your account at the top, then Delete Account. It takes three steps: SealNest shows what will be deleted, offers you one last export, then asks for a code we email you and Face ID.
Your account and its email sign-in, the locked copy of your vault on our servers, and the passwords on that device are deleted at once. Copies can remain in our service provider's recovery history for up to 30 days, then they are gone.
Deleting your account doesn't cancel an App Store subscription. Cancel it first, in your iPhone's settings.
Your choices
- Take your passwords with you any time: Export Passwords makes a file other password managers can read.
- Make an encrypted backup of your vault, which only SealNest can open, with your passphrase.
- Turn off the breach check, in Settings, under Security.
- Switch to Device-Only, remove a device, or delete your account, all in the app.
- Ask us for a copy of what we keep about you, or ask us to correct it. Write to the address on our Support page from the email address on your account. We answer within 30 days.
We won't treat you differently for asking. Wherever you live in the United States, you can make these requests.
Children
SealNest is not for children under 13 to use on their own, and we don't knowingly collect personal information from a child under 13. A parent can keep a child's documents in a kid's profile inside the parent's own family vault. If you believe a child under 13 has given us information, write to us and we will delete it.
Where a state's law requires it, SealNest asks Apple for your age range. The answer stays on your device. It isn't stored, and it isn't sent to us.
Keeping it safe, and if something goes wrong
Your vault is encrypted on your device, and we never hold a key that opens it. How SealNest protects your data explains how.
If something goes wrong that affects your information, we will tell you without delay, by email, on this website, and tell the authorities the law requires us to tell.
If the law requires it
If a court order or the law requires us to hand over information, we can only hand over what we have: the account details listed above, and any locked copy of a vault, still locked. We can't unlock it. Where the law allows, we will tell you first.
If SealNest changes hands
If SealNest is ever sold, or becomes part of another company, what we have would move with it and stay covered by this policy, and your vault would stay locked.
This website
This website uses no cookies, no analytics and no trackers, and it loads nothing from any other website. So a browser's "Do Not Track" setting has nothing to switch off here.
It is served by Cloudflare. Like every website, the company that serves it receives your device's internet address and the page you asked for, in order to send it to you, and may keep a record of that for security.
If someone sends you a SealNest share link, its page opens it in your browser. When you tap Open, the page asks our server for the locked copy. The key is the part of the link after "#", which your browser never sends; the page sends no cookie and no referrer, and we keep nothing about who opened it.
The live demo is made up. Nothing you tap in it is saved or sent.
Changes
If this policy changes, we will update the date at the top. If a change matters, we will tell you in the app or by email before it takes effect.
Contact
Questions about your privacy? Write to the address on our Support page.