Privacy Policy

Last updated 2026-05-09.

Kerveros is designed so we cannot read your data. This page describes the small amount of information we do receive, why, and how to opt out.

What Kerveros never sees

Your file contents, file names, folder structure, lock activity, and bucket credentials never reach us. They live entirely between your device and the S3-compatible bucket you configured. Your encryption passphrase is stored in your operating system’s keychain and used locally to derive the master key — we have no way to recover it.

Crash reporting (opt-in)

On first launch, Kerveros asks once whether you want to send anonymous crash reports. If you say yes, the app uses Sentry (a third-party error-tracking service) to transmit:

• Stack traces of unhandled errors and panics
• App version, OS family and version, locale, system architecture
• A randomly generated install identifier (no personal information)

We do not send file paths, file contents, file IDs, bucket details, or your IP address (Sentry is configured with send_default_pii: false). You can change this anytime in Kerveros → Settings → Privacy. Default is off.

License and purchase data

When you buy Kerveros, our payment processor (Lemon Squeezy) collects the information required to process payment and remit VAT. We receive your name, email, and country — not your card number. We use that information to issue a license key and send transactional email about your purchase (receipts, license issues, important updates). We do not send marketing email unless you opt in.

Updater traffic

Kerveros checks GitHub Releases for updates roughly once a day. The check is anonymous — no account, no install identifier — but GitHub will see the requesting IP address as part of normal HTTPS access logging.

Your rights (GDPR / CCPA)

If you live in the EU/EEA, UK, or California, you have the right to access, correct, or delete the information we hold about you (mostly your purchase record). Email kerveros@agileturtles.gr from the address used to purchase, and we will respond within 30 days.

Data retention

Purchase records are retained for as long as legally required for tax purposes (typically 7 years). Crash reports are retained by Sentry for 90 days and then deleted.

Data sub-processors

• Lemon Squeezy — payment processing, VAT compliance.
• Sentry — opt-in crash reporting only.
• GitHub — release distribution and updater manifest.
• Cloudflare — hosting and DNS for kerveros.agileturtles.gr.

Contact

Questions: kerveros@agileturtles.gr.