Keylane

1. Introduction

Welcome to Keylane. Livotov Labs Ltd. ("we", "us", "our") believes that privacy is a fundamental human right. We have designed the Keylane application and the keylane.app public server with a strict "Zero-Knowledge" and "Zero-Log" architecture. We cannot read your messages, we do not know who you talk to, and we do not monetize your data.

2. Information We Do NOT Collect

To prove our commitment to your privacy, we want to be absolutely clear about what we do not possess:

• ✕ No Personal Identifiers: We do not ask for, require, or store your phone number, email address, or real name. Your account is entirely decoupled from your real-world identity.
• ✕ No Plaintext Data: All messages, files, and media are End-to-End Encrypted (E2EE) locally on your device. We do not possess the decryption keys and cannot decrypt your data under any circumstances.
• ✕ No Persistent IP Logs: Our network infrastructure operates strictly in RAM. We do not write IP addresses, connection logs, or routing metadata to disk. Routing data is processed instantaneously and permanently discarded.
• ✕ Zero Analytics & Zero Cookies: We do not use cookies on our website. We do not use third-party tracking, crash reporting, or marketing SDKs in our client applications or on our server.

3. Information We Process (And Why)

Under the General Data Protection Regulation (GDPR), our lawful basis for processing the following minimal, strictly technical data is the performance of a contract (providing you with the Keylane secure routing service):

• Account Data (Cryptographic IDs): When you create an account, your device generates a random cryptographic ID and public keys. We store these public keys on our server solely to allow other users to encrypt and route messages to you. You have the option to claim an unoccupied custom tag/name for your ID; this tag is stored solely for routing purposes.
• Encrypted Message Queue: If you receive a message while offline, our server temporarily holds the encrypted blob until your device connects and downloads it. Once downloaded, it is instantly deleted from our server. If a message is not downloaded within 7 days, it is automatically and permanently deleted.
• Push Notification Tokens: To wake up your mobile device when you receive a message, we must process an anonymous push token provided by your operating system (Apple APNs or Google FCM). This token contains no personal data, and its only function is to ping your device to connect to our server.

4. Law Enforcement & Government Requests

Livotov Labs Ltd. is a registered Bulgarian legal entity and complies with valid legal orders from recognized European authorities. However, our compliance is strictly limited by the laws of mathematics and our "RAM-only" architecture. If we receive a subpoena or warrant, we can only provide what we have: the encrypted blobs (if any remain in the 7-day queue) and the public keys associated with a specific ID. We cannot decrypt your data, nor can we provide historical IP connection logs, as they are never recorded.

5. Your GDPR Rights

Under the EU GDPR, you have the right to access, rectify, portability, and erasure of your data. Because Keylane accounts are mathematically anonymous and contain no personal data, you can exercise your "Right to be Forgotten" instantly directly within the Keylane app by selecting "Delete Account." This action immediately and permanently purges your cryptographic ID, tag, and public keys from our infrastructure.