Our Commitment
What "Privacy-First"
actually means.
A lot of companies say "we take your privacy seriously." We built an architecture where we have no choice but to.
End-to-End Encryption
Your data is encrypted before it leaves your device.
When you save a password, a note, or a 2FA secret in Prifasi, it is encrypted on your device using a key derived from your master password. The encrypted blob — unintelligible ciphertext — is what gets transmitted to our servers.
At no point does your plaintext data travel over the network. At no point does Selteer receive anything that can be decrypted without your key.
This is end-to-end encryption (E2EE): the "ends" are your devices. Everything in between — network, server, database — only ever sees encrypted bytes.
Your Device
Encrypts data with your key
Selteer Server
Only receives ciphertext — can't decrypt
Your Other Devices
Decrypts with your key
Zero Knowledge
We have no master key. This is intentional.
"Zero knowledge" means Selteer has no cryptographic means to access your plaintext data. There is no admin panel where an employee can view your passwords. There is no backdoor for law enforcement. There is no key escrow.
Your encryption key is derived from your master password using a one-way function (key derivation function). The master password never leaves your device. We receive only the derived key's public counterpart — not the key itself.
This creates a mathematically enforced privacy guarantee: even if Selteer wanted to read your data, even if our servers were compromised, even if we were compelled by a court order — the plaintext is not available to us.
Court order?
We can hand over ciphertext. That's all we have.
Server breach?
Attackers get encrypted blobs they can't read.
Rogue employee?
No access to plaintext. Architecture prevents it.
Data we collect
Honest about what we store.
Ciphertext blobs
Encrypted content synced across your devices. We can't read it.
Account identifier (account-based products only)
An encrypted identifier used to associate your devices. Not your real email or name.
Anonymized usage metrics (optional)
Basic product analytics — no PII, no cross-site tracking, no ad targeting. Used to improve the product.
We never collect
Advertising profiles, third-party tracking, your plaintext data, behavioral fingerprinting, or anything we could sell.
Trust shouldn't require faith.
Privacy-first means building systems where you don't have to trust us. The math does the work. Your key stays on your device. We get ciphertext. You get peace of mind.
Read the full legal documents