Private by architecture. Short, because there’s little to tell.

This policy explains how KyberSpace (“we”, “us”) handles information in the Kyberspace app for iPhone and Android, currently in private beta, and on this website, join.kyberspace.app.

Kyberspace runs on VeilNet, a peer-to-peer network with no central server. That design is the reason this policy is short: information we never receive is information we can’t lose, sell or be made to hand over.

The app is designed so that we never receive your personal information. There is no sign-up, and no Kyberspace server that your messages pass through.

No account, phone number or email

You don’t register to use Kyberspace. The app doesn’t ask for your phone number, email address, real name or a password, and it never uploads your phone’s address book.

Your Kyber address and keys

The first time you open the app, it creates your encryption keys on your phone and derives your Kyber address (it starts with kyb1) from them. Your private keys never leave your device. There is no directory of addresses, so nobody, including us, can search for you.

Contacts and glyphs

You add a contact by swapping glyphs in person: one of you shows a code, the other scans it. A glyph carries your Kyber address and the name you suggest, and it’s shared only with the person who scans it. They can save you under any name they like. Your contact list is stored only on your device.

Messages

Messages are end-to-end encrypted with post-quantum cryptography and sent directly from your phone to theirs. They are stored only on those two devices. If the other person is offline, a message waits on your phone until you’re both online. It is never held on a server. We can’t read your messages and we don’t have a copy.

Kyber Joint

A Joint is live only. What you send reaches the members who are online at that moment, and nothing is kept for later, not on a server and not for members who were away. As with any message, people who receive it can still screenshot or copy what they see.

Kyber Hub

Files you add to a Hub stay on your phone. People you allow fetch a copy directly from your device; nothing is uploaded to a cloud drive. Once someone has taken a copy, it’s on their device and under their control.

Connections and IP addresses

To connect directly, devices have to reach each other over the internet. That means the devices yours connects to, including the people you talk to, can see your device’s IP address, which can reveal your approximate location. This is true of any direct, peer-to-peer connection. They cannot see the content of your messages. The app doesn’t send analytics, crash reports or telemetry to us.

Permissions

Kyberspace asks for access only when a feature needs it: the camera to scan a glyph, and the files you choose to add to a Hub. Scanning happens on your device.

Your data, on your device

• Deleting a conversation or contact removes it from your device.
• Deleting the app removes all Kyberspace data from that device.
• Messages you’ve already sent stay on the recipient’s device.
• If you lose your phone without a backup, your conversations and address can’t be recovered. There is no copy for us to restore.

Kyber Veil is a planned part of Kyberspace and the only one that will require registration. It isn’t available yet, and we don’t collect any information for it today.

Before Kyber Veil launches, we’ll update this policy to explain exactly what registering involves, what information it needs and why. Nothing in that update will apply to you unless you choose to register.

Your early-access email

If you request early access, we collect the email address you enter. We use it for one thing: sending your invite when a spot opens in the beta. We don’t add it to a newsletter, sell it or use it for advertising.

We process it because you asked us to (your consent). You can withdraw that at any time by emailing privacy@kyberspace.app. We keep it only as long as we need it to send your invite, and delete it sooner if you ask.

Email delivery

We send email through Resend, an email delivery provider that processes your address on our behalf and may store it in the United States. We don’t track whether you open our emails or click their links.

Cookies and analytics

This website doesn’t use cookies, analytics or advertising trackers. Fonts and images are served from this site, not from a third party.

Server logs

Like any website, our hosting provider automatically processes technical information such as your IP address and browser type to deliver pages and protect the site from abuse. We don’t use it to identify you.

We don’t sell or rent personal information, and we don’t share it for advertising. The only party we share your early-access email with is Resend, so it can deliver your invite.

If we receive a valid legal request, we can only provide what we hold, which is at most an early-access email address. We have no messages, contacts, files, phone numbers or account records to hand over, because we never had them.

Kyberspace uses post-quantum end-to-end encryption, with keys created and kept on your device. Because your conversations live on your phone, the best way to protect them is to protect your phone: use a strong passcode and keep its software up to date.

We limit access to the early-access list to the people who need it to send invites.

Depending on where you live, for example under the GDPR, the UK GDPR, Australia’s Privacy Act or US state privacy laws, you may have the right to:

• access the personal information we hold about you, and get a copy of it;
• correct it, or ask us to delete it;
• object to or restrict how we use it;
• withdraw your consent at any time.

In the app, you already hold all of your own data. For your early-access email, write to privacy@kyberspace.app and we’ll respond within one month. You can also complain to your local data protection authority.

Kyberspace isn’t meant for children under 13, or under the minimum age where you live if that is higher. We don’t knowingly collect information from children. If you think a child has given us their email, contact us and we’ll delete it.

We’ll update this policy when Kyberspace changes, including before Kyber Veil launches. The current version always lives on this page, with its effective date at the top. For significant changes, we’ll post the new version here before it takes effect.

Questions about this policy, or requests about your information: privacy@kyberspace.app.