Legal

Privacy Policy

Last updated: 17 September 2026

DotBGE is a file-encryption app for iPhone, iPad, Android, and Mac, built on the open .bge format. It is designed so that your files and keys stay under your control. This policy explains, plainly, what the app does and does not do with your data.

The short version: No DotBGE account. No advertising or tracking. Encryption, decryption, file preview, and QR-code scanning happen on your device. We do not receive your files or unencrypted private keys. A private key leaves protected device storage only when you explicitly export an encrypted backup, or when you enable an Apple sync feature described below.

1. No DotBGE account or backend

DotBGE does not require an account or sign-in, and we do not operate a backend that receives your files, keys, contacts, or usage history. We do not embed advertising, app-usage analytics, or cross-app tracking SDKs, and we do not use third-party data to profile you. Apple and Google may process store transactions and platform diagnostics under their own privacy policies, but those services do not give us your files or private keys.

2. Your files

Encryption and decryption happen locally on your device using standard algorithms (RSA-4096 and AES-256-GCM). Files you encrypt or decrypt are never transmitted to us. When you preview a decrypted file inside the app, the content is held in memory and is not written to disk.

3. Your keys

On Apple devices, your private key is stored in the system Keychain. On Android, it is protected by Android Keystore and hardware-backed security where the device supports it. Access may be gated by Face ID, Touch ID, Android biometrics, or your device credential. DotBGE does not transmit an unencrypted private key to us.

If you explicitly export an identity backup, DotBGE encrypts the private-key backup with the password you provide and saves it only to the destination you choose. You are responsible for protecting that backup and its password.

If you enable iCloud Keychain on an Apple device, Apple may sync your key across your own Apple devices. That is handled by Apple under Apple's Privacy Policy, not by DotBGE.

4. Optional iCloud sync

On Apple platforms, if you turn on Vault sync, your encrypted vault, identities, and contacts are stored in your own private iCloud container so they appear across your devices. This data lives in your iCloud account, managed by Apple — it does not pass through DotBGE. Sync is off by default, and you can turn it off or erase the iCloud copy from within the app. The Android app does not upload its vault or identities to DotBGE.

5. Identities and contacts

An identity is a name, an optional avatar, and a public/private key pair you create on-device or restore from your own encrypted backup. Contacts store other people's public keys so you can encrypt files for them. This information is stored locally (and in your private iCloud container on Apple platforms if sync is enabled). It is never sent to us.

6. Camera and QR-code scanning

On Android, camera access is requested only when you choose to scan an identity-card QR code. Camera frames and QR decoding are processed on-device; DotBGE does not upload the camera image or decoded QR content. Camera frames are not saved. If you choose to import the scanned identity card, its public identity information is saved locally as a contact. You can deny or revoke camera permission in system settings and import an identity card by file instead.

7. Purchases

DotBGE Pro is sold through Apple's App Store using StoreKit and through Google Play using Google Play Billing. Apple or Google processes the payment; we do not receive your payment-card details. The app receives product and entitlement information needed to display offers, complete purchases, restore purchases, and unlock Pro features. Store transactions are handled under Apple's Privacy Policy or Google's Privacy Policy, depending on your platform.

8. Contacting support

If you email support@dotbge.app, we receive your email address and whatever you include in your message. We use it only to respond to you. To help us debug, the app pre-fills the app version and device model in the message body — you can edit or remove this before sending.

9. Local data and deletion

You can delete vault items, identities, contacts, and backups using the app or your device's file tools. Uninstalling the Android app removes its app-private local data because Android system backup is disabled. Apple-platform data stored in your private iCloud container can be erased from within the app. Files or encrypted backups that you exported elsewhere remain wherever you chose to save them.

10. Children

DotBGE is not directed to children under 13 and does not knowingly collect personal information from them.

11. Changes to this policy

If we update this policy, we will revise the date above and post the new version at this URL. Material changes will be reflected in an app update where appropriate.

12. Contact

Questions about privacy? Email support@dotbge.app.