We can't lose what we never hold.
Plain language, no dark patterns. Here's exactly what stays with you and what the service sees.
Last updated: this is a pre-launch draft — review with counsel before going live.
The short version
Sigyl has no email, no phone number, and no password. Your identity is a key generated on your device. We hold as little about you as the product can possibly function with.
What we never collect
- No passwords — there are none to collect.
- No photos of you — the liveness check happens on your device.
- No copy of your private key in usable form — it stays sealed on your phone.
The liveness check
To keep bots out, a one-time check confirms a real, live person is signing up. This produces a one-way mathematical fingerprint used only for bot-resistance. It cannot be reversed into your face, and it is not used to identify you across the service or anywhere else.
What the server sees
To run the network, the server stores your public key and alias, whatever profile details you choose to make visible, and the signed actions you take (like posting). Direct messages pass through as encrypted envelopes the server cannot read.
Your control
You can export your data and delete your account from within the app. Deleting removes your server-side records associated with your key.
Children
Sigyl is intended for people aged 18 and older.
Changes
If this policy changes, we'll post the updated version here with a new date.
Contact
Questions or a privacy request? Email team@sigyl.app.