PGPony Privacy Policy

Effective Date: March 30, 2026

PGPony ("the App") is developed by Kevin Stewart ("we," "us," or "our"). This Privacy Policy covers both the iOS and Android versions of PGPony. The short version: we don't collect, store, or transmit any of your personal data.

1. Information We Collect

PGPony does not collect any personal information. We do not use analytics, tracking, advertising SDKs, or any form of telemetry. The App does not communicate with any servers owned or operated by us, except for optional promo code redemption (see Section 3).

2. Data Stored on Your Device

All data created or used by PGPony stays on your device:

• PGP Keys: On iOS, private keys are stored in the iOS Keychain (Apple's hardware-backed secure storage). On Android, private keys are stored in Android Keystore (hardware-backed where available) and encrypted SharedPreferences. Key metadata is stored locally using SwiftData (iOS) or Room (Android).
• Encrypted/Decrypted Content: All encryption and decryption operations happen entirely on your device. No plaintext or ciphertext is transmitted to any server.
• Contact Information: If you grant permission, the App reads your Contacts to display names and photos alongside keys and to auto-match keys by email. Contact data is used only for display and matching, is cached in memory only, and is never stored persistently or transmitted.

3. Third-Party Services

PGPony interacts with the following third-party services only when you explicitly initiate the action:

• keys.openpgp.org: When you upload your public key or search for someone else's key, the relevant data is sent to keys.openpgp.org. This is governed by their own privacy policy.
• Apple App Store / Google Play: In-app purchase transactions for PGPony Pro are processed by Apple (iOS) or Google (Android). We do not receive or store payment information. Purchase verification is handled by the respective platform's billing APIs.
• pgpony.norsehor.se: If you redeem a promotional code, the code and a device identifier are sent to our server for validation. The device identifier is used solely to prevent duplicate redemptions and is not linked to any personal information.

No other network requests are made by the App.

4. Biometric Data

If you enable biometric lock (Face ID, Touch ID, or Android fingerprint/face unlock), authentication is handled entirely by platform-native APIs. PGPony never accesses, processes, or stores biometric data.

5. Clipboard

When you copy encrypted or decrypted text, PGPony places it on your device's clipboard. If auto-clear is enabled (on by default), the clipboard is automatically wiped after your chosen interval. Clipboard contents are never transmitted.

6. Camera

If you grant camera permission for QR code scanning, camera frames are processed locally on your device to detect QR codes. No images or video are stored, transmitted, or recorded.

7. Children's Privacy

PGPony is not directed at children under 13. We do not knowingly collect information from children.

8. Data Sharing

We do not sell, share, rent, or trade any user data with third parties. There is no data to share because we do not collect any.

9. Data Retention

Since we do not collect data, there is nothing to retain. All data on your device is under your control and can be deleted by removing the App or using the "Clear All Data" option in Settings.

10. Your Rights

Because PGPony does not collect or process personal data, there is no data for us to provide, correct, or delete. If you have questions or concerns, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated effective date.

12. Contact

Kevin Stewart
Email: kgstew96@gmail.com
Web: pgpony.norsehor.se

← Back to PGPony