Cozy Safe

Privacy policy

Last updated 2026-10-19

In short

Cozy Safe does not collect, send or sell any of your data. There is no account, no analytics, no advertising and no tracking in the app.

Everything you put in a vault is encrypted on your device. We cannot read it and we have no copy of it.

What stays on your device

Your vaults, notes, files and photos, always encrypted with keys derived from your password and Secret Key.

App settings such as language and light or dark mode.

Where your data can go, only if you choose

Sync and backup use a folder or device you pick (for example iCloud Drive, Google Drive, Dropbox, or another device on your network). Only encrypted data is written there; the provider you choose cannot read it.

If you turn on Secret Key sync, the Secret Key is stored in your platform's end-to-end encrypted password store (iCloud Keychain or Google Password Manager), under that provider's privacy terms.

When you share, export or open an item in another app, that app receives an unencrypted copy and handles it under its own terms.

Permissions

Camera: only to take photos straight into a vault, when you open the camera. Photos are not saved to your photo library.

Biometrics: only if you turn on Face ID, Touch ID or fingerprint unlock. Your biometric data never leaves the device's secure hardware and is never available to the app.

This website

safe.cozypi.com is a set of static pages served by Cloudflare. It sets no cookies and runs no analytics. Cloudflare may keep standard technical logs (such as IP address) for security, under its own privacy policy. Downloads are served by GitHub.

Children

Cozy Safe is not directed at children under 13 and collects no data from anyone.

Changes and contact

If this policy changes, the new version will be published on this page with a new date.

Questions: support@cozypi.com. Cozy Safe is made by Cozy Pi, an independent studio, and its source code is public at github.com/cozy-pi/cozysafe.