Privacy by construction.
Effective June 28, 2026
Short version: your content is end-to-end encrypted and unreadable to us. We hold the minimum metadata needed to run Manifa, we don't sell your data, and we use a small set of named processors.
What we can never see.
This isn't a promise we choose to keep — it's enforced by the cryptography. Encryption happens on your devices, so the following never reaches us in a form we could read:
- The contents of any file or .env you sync
- The names of your files and directories
- Your account password, recovery code, or any encryption key
What we do hold.
The minimum needed to authenticate you, sync encrypted blobs to your devices, and bill you.
Email, name, and (optionally) a profile photo you upload.
Wrapped (encrypted) key blobs, device public keys, vault and snapshot identifiers. No plaintext, no names.
Standard server logs — IP, user-agent, timestamps — and chunk sizes and sync timing, for security and operating the service.
Handled by Stripe and Polar. We store the subscription identifier and status, never card details.
How we use it.
To run Manifa, authenticate you, sync your encrypted data, send transactional email (sign-in codes, invitations, billing receipts), and provide support. We never use your data for advertising, and we never sell it.
Sharing & processors.
We share data only with the named processors needed to operate the Service — and what reaches the storage processor is ciphertext. We do not sell your data.
Account data is kept while your account is active. Delete your account to remove personal data and your encrypted blobs — except where retention is required by law or for fraud prevention.
Access, export, or delete your data at any time. Because content is encrypted on your devices, you always hold the only readable copy.
A small number of first-party cookies for sign-in and theme preference. No third-party tracking or advertising cookies.
Questions about this policy or a data request? Email raymond@mzed.studio.