Privacy Policy

1. Introduction

Certonymity creates various products and services, including apps, browser extensions, SDKs and other resources ("our services") for the purpose of protecting our users' privacy and personal data.

This privacy policy explains how we collect, use, and safeguard your information when you use our services. We are strongly committed to protecting your privacy and complying with data protection laws, as well as the requirements set forth by the Google Play Store, Apple App Store, and Google Cloud Platform (GCP).

2. Information we collect

We collect information that you provide directly to us, including your email address when you join our waiting list or contact us for support. The legal basis for this is consent.

We may also collect anonymized device information and usage metrics to improve app performance and address errors. The legal basis for this is our legitimate interest to improve the quality of our services.

If you choose to use our end-to-end encryption feature, encrypted message content is stored locally on your device. We do not collect or share this data.

To authenticate your emails, we process your identity information on a one-time basis. Again, this data is stored only on your device. We do not collect or share this data.

3. How we use this information

We use the information we collect to:

Provide core functionality, such as accessing and sending emails.

Enable end-to-end encryption for secure communications.

Maintain and improve our services' functionality, stability, and security.

Communicate with you.

Comply with legal obligations and enforce our terms and conditions.

4. Data retention

We retain minimal user data and only for as long as necessary. Access tokens and cached metadata are only stored locally.

5. Third-party services

We use the following third-party services:

Google and Outlook APIs (Gmail, Outlook Mail, OAuth 2.0): To access your Gmail or Outlook inbox and send/receive messages.

6. Information sharing

We do not sell, trade, or otherwise transfer your personal information to third parties.

7. Information security

We implement extra measures to secure your information on your device through post-quantum secure encryption.

8. End-to-end encryption

Our services use end-to-end encryption to protect your communications. Encrypted communications are readable only by the sender and the intended recipients. We do not store or have access to your private encryption keys or communications.

9. Your rights

Use of authentication and end-to-end encryption is optional and controlled per message. You can revoke our services' access to your email account, camera, and biometric data at any time. Deleting our services will delete all information held on your device.

10. Changes to this privacy policy

We may update this privacy policy at any time. Continued use of our services after changes implies acceptance of the new privacy policy. We will notify you of any significant changes within our services.

11. Contact us

If you have any questions about this privacy policy, please contact us at info@certonymity.com.

Last updated: 1 July 2026