Privacy Policy

Effective July 6, 2026

Binder is a local-first, end-to-end-encrypted document organizer. Your documents live on your device, encrypted with a key derived from your PIN. Privacy is the product's core design, not an afterthought.

What we collect

Nothing, unless you enable sync. Without a sync account, Binder makes no network requests with your data and we hold nothing about you.

If you create an optional sync account, we store:

• Your email address — to identify your account and send password-reset codes.
• A password hash (scrypt) — we never store your password itself.
• Encrypted document data — your documents, thumbnails, and search text are encrypted on your device with AES-256-GCM before upload. The server stores only ciphertext and a PIN-protected key bundle it cannot open. We cannot read your documents, their names, or their contents. Neither can our storage providers.

What we don't do

• No ads, no analytics, no trackers, no SDKs that phone home.
• No selling or sharing of data with third parties for any commercial purpose.
• No reading your documents — cryptographically, we can't.

Service providers

Encrypted blobs are stored in Oracle Cloud object storage. Password-reset emails are delivered via Resend. Both see only what's described above (ciphertext; your email address for delivery).

Permissions

Camera — used only for scanning documents, on-device. Images go straight into your encrypted vault. Notifications — optional, local-only expiry reminders scheduled on your device.

Data retention & deletion

Delete your account any time in Settings → Cloud backup & sync → Delete account — this immediately and permanently removes your credentials and all stored ciphertext from our servers. See account deletion for details, including how to request deletion by email.

Changes

If this policy changes, the effective date above changes with it. Material changes will be noted in the app's release notes.

Binder — getbinder.xyz · Contact: support@getbinder.xyz