Draft for the preview build
Last updated 2026-11-07
Soren is built so that we can't read your vault. This policy says exactly what we can see, what stays on your devices, and what you control.
Your master key, recovery code, device password, and everything in your vault: item names, usernames, passwords, notes, 2FA keys, photos, collections and send-link contents. All of it is encrypted on your device before it's sent, with keys we never have.
Your email address; your passkeys' public keys; your sessions (as scrambled tokens) with rough device names like "Chrome on macOS" and when they were last used; your vault's encrypted data and wrapped keys; the number, size and timing of your encrypted items and photos; and, for send links, when they expire and how often they've been opened.
Your preferences (like auto-lock and Browser Privacy), your name if you add one, an optional device password lock, and an encrypted offline copy of your vault so it opens without internet. Signing out of a device removes them.
No ads, trackers or analytics. The breach check sends only the first 5 characters of a hashed password, through our server, to Have I Been Pwned. If website icons are on, our server fetches icons from the sites in your vault: it sees which site names are asked for, but those requests aren't linked to your account. You can turn website icons off in Settings.
Our servers keep short-lived technical logs (like IP addresses and request times) to run the service and stop abuse. We use them for nothing else and don't sell any data.
Export your vault at any time, sign out any device from the Devices page, and ask us to delete your account at [contact email]. Depending on where you live, you may have more rights, such as seeing or correcting the data we hold about you; contact us to use them.
If this policy changes in a way that matters, we'll tell you in the app. Questions: [contact email].
Draft for the preview. Written in plain language, not reviewed by a lawyer yet. Items in [brackets] must be filled in before a public launch.
Back to soren.locker