Privacy Policy

The short version

• The self-hosted Qeva app has no telemetry and never sends your vault to us.
• This marketing website uses no advertising or third-party tracking.
• We do not sell, rent, or trade personal data. Ever.

What this policy covers

Qeva has two distinct parts, and it matters which one you are using:

• The Qeva software - the open-source app you download and run on your own server.
• The Qeva website - this site, where you read about the project and get in touch.

The self-hosted Qeva app

When you self-host Qeva, it runs entirely on infrastructure you control. It contains no analytics, no trackers, and no "call home" behaviour. Your vault, credentials, and activity logs live on your server and are never transmitted to us.

In data-protection terms, you (the operator of your instance) are the data controller for everything stored in it. We have no access to it and cannot retrieve or reset it on your behalf.

The Qeva website

This site is intentionally minimal. It may process:

• Messages you send us. If you email us or join a waitlist, we receive the address and content you provide, and use it only to reply and to keep you informed about what you asked for.
• Basic server logs. Our hosting provider may record standard request logs (such as IP address and user agent) for a limited time to keep the site secure and reliable. We do not use these to profile or track you.

The website sets no advertising cookies and loads no third-party analytics.

What we never do

• Sell, rent, or share your personal data with advertisers.
• Embed third-party tracking pixels or behavioural analytics.
• Build advertising profiles about you.

Third-party services

To run the project we rely on a small number of reputable providers, such as a web host or CDN for this site, GitHub for our source code and community, and an email provider for correspondence. Each processes limited data strictly to provide their service.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you (for example, an email you sent us). To exercise any of these, contact us and we will respond within a reasonable period.

Data retention

We keep correspondence only as long as needed to help you and to meet any legal obligations, then delete it. Server logs are rotated on a short schedule.

Children's privacy

Qeva is not directed at children under 16, and we do not knowingly collect their personal data.

Changes to this policy

If we make material changes, we will update the date above and, where appropriate, note the change on this page.

Contact

Questions about privacy? Email us at hello@qeva.app. For security matters, see our Security & disclosure page.