Last updated: 21 August 2026
This Privacy Policy explains how Keyra, an application provided by PenguinConverters AG (“we”, “us”), handles information and protects your privacy.
Keyra is designed as a local-first application. Your secrets and other app data remain on your device. Keyra does not transmit your data to us or to third parties.
Keyra does not request the Android INTERNET permission.
As a result, the application cannot establish Internet connections through Android's networking APIs. Keyra does not upload your secrets, usage information, identifiers, diagnostics, or other app data to our servers or to third parties.
You can independently verify the permissions requested by the installed application through Android and the permission information provided by Google Play.
We do not collect personal data through Keyra.
In particular, Keyra does not use:
analytics or usage-tracking services;
advertising SDKs;
Firebase Analytics;
Firebase Crashlytics;
telemetry services;
remote crash-reporting services; or
tracking technologies.
We do not receive information about how you use Keyra.
Information that you enter into Keyra, including information stored in your Tresor and your Secrets, is processed and stored locally on your device.
This information is not transmitted to PenguinConverters AG.
Because the application declares Android's backup functionality as disabled (allowBackup="false"), Keyra's application data is not included in Android application backups made available to the app through that mechanism.
Keyra requests only permissions required for its functionality.
Keyra may request access to your device's camera when a feature requires scanning a QR code or other supported visual code.
Camera images used for scanning are processed locally by the application. Keyra does not transmit camera images to PenguinConverters AG or to third parties.
You can deny or revoke camera access through Android's system settings.
Keyra may use Android's biometric functionality to authenticate you before providing access to protected functionality.
Biometric authentication is performed by Android's system services. Keyra does not receive or store your fingerprint, facial image, or other biometric template. The application receives only the authentication result required to determine whether access should be granted.
Depending on the Android version and device, the application may declare the Android biometric permissions required to access this system functionality.
Keyra uses software libraries required to provide its functionality and user interface, including components from AndroidX/Jetpack Compose, Kotlin/kotlinx, JNA, and ZXing.
Their inclusion does not cause Keyra to transmit your personal data to their developers. Keyra contains no analytics, advertising, telemetry, or remote crash-reporting SDK.
Keyra does not transmit personal data to us. Accordingly, we do not sell, rent, or share app data with advertisers, analytics providers, data brokers, or other third parties.
Data stored by Keyra remains locally on your device until you delete it using functionality provided by the application, clear the application's data through Android, or uninstall the application, as applicable.
Because Keyra does not transmit this data to PenguinConverters AG, we do not maintain a server-side copy that must separately be deleted.
Keyra does not knowingly collect or transmit personal data from children or adults. The application's privacy architecture does not depend on the user's age: app data remains local to the device.
Keyra is designed to minimise privacy and security risks by avoiding unnecessary data collection and network communication.
No method of protecting information on an electronic device can provide an absolute guarantee of security. You are responsible for maintaining appropriate security for your device, including its operating-system access controls.
PenguinConverters AG is based in Switzerland.
Where applicable, we process personal data in accordance with the Swiss Federal Act on Data Protection (FADP / Datenschutzgesetz, DSG) and its implementing legislation.
Where the EU General Data Protection Regulation (GDPR) applies, we also comply with its applicable requirements.
As described above, Keyra itself is designed so that personal data stored in the application is processed locally and is not transmitted to PenguinConverters AG.
Please note that contacting us directly, visiting our website, or otherwise interacting with PenguinConverters AG outside the Keyra application may involve separate processing of personal data. Such processing is governed by the privacy information applicable to the relevant service.
We may update this Privacy Policy if Keyra's functionality, legal requirements, or our data-handling practices change.
If a future version of Keyra introduces functionality that transmits or otherwise processes data differently from what is described here, we will update this Privacy Policy accordingly.
The current version will be published on our website.
The provider and data controller is:
PenguinConverters AG
Spätenweg 8
CH-8906 Bonstetten
Switzerland
Website: penguinconverters.ch
Mail: keyra@penguinconverters.ch
For privacy-related questions or requests, please contact us using the contact details published on our website.