Privacy
Updated 4 November 2026.
Voultti keeps your personal data — logins, documents and other items — encrypted with keys made on your own device. Our server stores the encrypted data but cannot read it, and we never receive your password or your Secret Key. This notice describes the little we do process, why, and for how long. It covers the Voultti service at app.voultti.com, the Voultti apps for computers and phones, and the Voultti browser extension.
Voultti is still in testing. There are no backups yet, and data stored during testing may be erased.
Who is responsible
Sudoers (business ID 1661097-0)
Väinöläntie 25 B, 40420 Jyskä, Finland
[email protected]
Write to this address with any question about your data or to use your rights.
What we cannot see
Everything you store is encrypted on your device before it is sent: the titles, usernames, passwords, web addresses, notes and other fields of your items, the names of your spaces, the names, types and contents of your files, and your settings. We do not have the keys, so we cannot read, search or analyse this content, and we cannot recover it for you if you lose both your password and your Emergency Kit.
What we process, and why
- Your account. Your email address, when the account was created and when you confirmed the address. We use them to run your account and to send the emails listed below. The legal basis is our contract with you.
- Signing in. Sign-in uses a protocol (OPAQUE) in which your password never reaches us. We store the protocol's server-side record and your keys in a form only you can open. Basis: contract.
- Devices and sessions. For each signed-in device: a coarse description such as “Firefox on Linux”, when it signed in and when it was last used. A random identifier for each browser or app lets us tell you when a new device signs in. You can see and sign out your devices in the app. Basis: contract, and our legitimate interest in keeping accounts safe.
- What the server can see of your content. How many spaces, items and files you have, how large each one is, when each was created, changed or deleted, and who shares a space with whom and in what role. The service needs this to store and sync your data. Basis: contract.
- Sharing. When you invite someone to a space, we store the email address you invited and send that person an invitation that names you by your email address. They also see your address in the app before they accept. Members of a space see each other’s account identifiers and public keys; the server does not show them each other’s email addresses. Basis: contract.
- Protection against abuse. To limit repeated attempts at signing up and signing in, we count attempts per IP address and per email address entered. These counters are deleted within two days. Basis: legitimate interest in keeping the service and accounts safe.
- Emails. We send a code to confirm your email address, a notice when a new device signs in, a code and a notice when you change your address, and invitations to shared spaces. We send no marketing.
- Technical logs. Our servers write technical logs of requests and errors. They are overwritten automatically as they fill up and are used only to keep the service running.
- Page view counts. We count page views on voultti.com: per day, which page was viewed and which website the visitor came from. We set no cookies, record no IP addresses and cannot tell visitors apart.
We do not track you, and we do not sell or share your data for marketing.
Cookies and browser storage
Voultti sets no cookies. The web app keeps your sign-in tokens in the browser’s session storage, which is cleared when you close the tab. Your language and appearance choices, the identifier of your browser and, if you choose so, your Secret Key are kept in the browser’s local storage on your own device. The voultti.com website stores nothing.
The apps and the browser extension
The Voultti apps keep your Secret Key, if you let them remember it, in your device’s own secure key store (for example macOS Keychain, Windows Credential Manager or Android Keystore). The apps contain no analytics or error-reporting services.
The Voultti browser extension works only together with the Voultti app on the same computer. It connects to no server. It passes the login you choose from the app into the sign-in form of the page you are on, and offers to save a login you sign in with. When you choose Fill for your personal details or a payment card, the extension passes them from the app into the form on the page in the same way. It doesn't store them and doesn't send them anywhere else. It keeps in the browser only the public key of the app it is paired with, the sites where you chose “Never save” and whether the icon in sign-in fields is on. A login waiting to be saved is held in the browser’s memory only until you save or dismiss it.
Who else handles data
- UpCloud Ltd (Finland) provides the servers and storage where your account and encrypted data are kept, in the European Union.
- Resend, Inc. (United States) sends our emails, so it receives your email address and the email’s content. The transfer outside the EU is protected by the European Commission’s standard contractual clauses in Resend’s data processing terms.
Both process data only on our behalf. Staff can see only account-level information: the email address, when the account was created and confirmed, when it was last used, how many devices, spaces, items and files it has, and how much storage it uses. Staff cannot see your content.
How long we keep data
- Your account and data: until you delete the account. Deletion is immediate and removes your account, your devices and every space only you belong to, with its items and files.
- Items you have deleted: in the trash for 30 days. Earlier versions of items: 90 days.
- An account whose email address is never confirmed: 7 days.
- Sign-up and sign-in attempts: minutes; abuse-protection counters: two days.
- Invitations: they expire after 7 days. The invited address is kept with the space until the space is deleted.
- In a space shared with others, what you added stays for the other members after you leave or delete your account. The space’s membership history and everything you signed in it keep a random identifier of your former account and its public signing key for as long as any of it remains, so the other members can still check it. The server keeps no name or email address with them. A member who invited you, or whom you invited, may still have your email address in their own encrypted records.
Your rights
You have the right to get a copy of your personal data, to have it corrected, to have it erased, to receive it in a machine-readable form, and to object to processing based on legitimate interest. You can change your email address in the app. To delete your account or use any other right, write to [email protected]. We answer within one month.
You can also complain to the data protection authority. In Finland it is the Office of the Data Protection Ombudsman, tietosuoja.fi.
Changes
If we change this notice, we update the date at the top. If a change matters for how your data is processed, we tell you by email before it takes effect.