Privacy Policy

Encrypta (encrypta.app) is an end-to-end encrypted personal video vault developed and operated by Rhotak LLC, a Wyoming limited liability company (https://rhotak.com) ("Rhotak", "we", "us"). Rhotak is responsible for your personal information under this policy.

This policy covers this website and waitlist, the Encrypta web application scheduled for December 2026, and the iOS and Android apps that will follow.

Many cloud video services hold the keys to your files or process your videos on their servers. Encrypta does neither:

• In-Browser Recording: Videos are recorded in the web application directly from your camera and microphone, using your browser's standard media APIs.
• Encryption as You Record: Video is encrypted in memory with industry-standard authenticated encryption (AES-256-GCM, via the browser's Web Cryptography API) before anything is saved or uploaded.
• Keys Stay on Your Device: Your keys are derived from your passphrase on your device, using a hardened key derivation function designed to resist password-guessing attacks. Keys are never sent to, copied to, or logged by Rhotak.

We collect only what we need to run Encrypta. Today, during pre-launch, the only personal information we collect is what you send when you join the waitlist; we do not record or store any videos. Once the web application launches, we will also collect the items marked below:

• Waitlist Signup: If you join the waitlist, we keep your email address to tell you when the Encrypta web application opens in December 2026. With it we store the IP address the request came from and a one-way hash of your browser's user-agent, language, and time zone, used only to limit repeated submissions. Your email address is also added to our mailing list at Resend, our email provider.
• Account Details (after launch): When the web application launches, you will create an account to use your vault. We will list exactly which account details we collect here before launch.
• Encrypted Vault Data (after launch): The videos you record, which are encrypted on your device before upload. We cannot decrypt them. To store them, we necessarily see basic technical details such as file size and upload time, but never the content.
• Theme Preference: Your light or dark mode choice is saved in your browser's localStorage. It never leaves your device. See our Cookie Policy.
• Server Logs: Our web servers record standard request data (IP address, browser type, and time of request) to keep the service secure and running. These logs are deleted automatically after 30 days.

We use your information only for the purposes below. Where the GDPR or similar laws apply, each purpose has a legal basis:

• Launch Notifications (consent): We email you about the Encrypta launch because you asked us to. You can withdraw consent at any time.
• Providing Your Vault (contract): We store your encrypted videos and account details so you can use the service you signed up for.
• Security & Reliability (legitimate interests): We use server logs to protect Encrypta against abuse and attacks and to keep it running.
• Spam Prevention (legitimate interests): We use the IP address and browser hash stored with a waitlist signup to limit repeated submissions and to block automated spam.

Rhotak does not collect, inspect, or sell any of the following:

• Your Video or Audio Content: We have no access to your decrypted videos, audio, or anything derived from them, such as transcripts.
• Biometric Data: Our iOS and Android apps will let you unlock the app with Face ID, Touch ID, or Android biometrics. That check happens entirely on your device; we never receive biometric data, and biometrics are never used to encrypt your videos.
• Location and Contacts: We do not collect your location, your contacts, or device motion data.
• Advertising Profiles: We do not sell data to data brokers or use your information for advertising.

We do not sell or rent your personal information. We share it only in these cases:

• Service Providers: This website runs on servers we rent from Vultr. Our emails are sent, and our waitlist mailing list is held, by Resend. Once the web application launches, your encrypted videos will be stored with Cloudflare, which, like us, cannot decrypt them. These providers may use your information only to provide their service to us.
• Legal Requests: If the law requires it, we may disclose information we hold. Because of our encryption, that can only ever be your account details, technical details, and encrypted files we cannot read.

Rhotak is based in the United States, so your information is processed in the US. Where the law requires it, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for transfers from the EU, UK, and similar regions.

Your videos are encrypted on your device and then stored in the cloud in encrypted form. We keep information only as long as we need it:

• Waitlist Signup: Your email address, and the IP address and browser hash stored with it, are kept until you unsubscribe or ask us to delete them.
• Blocked Submissions: Waitlist submissions our spam checks turn away are logged, with the same details, to help us block abuse, and deleted automatically after 90 days.
• Encrypted Videos: Kept until you delete them or your vault. When you delete a video or your vault, the encrypted files are removed from our storage.
• Server Logs: Deleted automatically after 30 days.
• Keys in Memory: While your vault is unlocked, your keys are held only in your device's memory and are cleared when you lock the vault, close the tab, or stay inactive.

Encrypta launches in December 2026 as a web application that runs in modern browsers. Apps for iOS and Android will follow soon after.

The native apps will keep the same zero-knowledge guarantees. They will also offer optional biometric unlock (Face ID, Touch ID, or Android biometrics) for opening the app. Biometrics only unlock the app; your videos remain encrypted with keys derived from your passphrase.

Depending on where you live, including under the GDPR (EU and UK) and the CCPA/CPRA (California), you have the right to:

• Access and Portability: Get a copy of the personal information we hold about you.
• Correction: Ask us to fix information that is wrong.
• Deletion: Ask us to delete your information, including your waitlist email.
• Objection and Restriction: Object to, or ask us to limit, how we use your information.
• Withdrawal of Consent: Unsubscribe from launch emails at any time.
• Non-Discrimination: Using any of these rights will never cost you service or features.

To use any of these rights, email privacy@encrypta.app. We will respond within 30 days. We do not sell your personal information or share it for cross-context behavioral advertising. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

Encrypta is not intended for anyone under 16, and we do not knowingly collect their information. If you believe a child under 16 has given us personal information, contact us and we will delete it.

Because we never have access to your keys, you are the only person who can unlock your vault.

We will update this policy as Encrypta launches and new apps are released. When we do, we will change the effective date above, and for significant changes we will notify you by email.

For privacy questions or requests, contact us: