Privacy Policy
Chestword · Greenancy · Last updated 18 October 2026
Chestword is a password manager built so that we can't read your data. Everything you store is encrypted on your device before it leaves it, with keys derived from your master password and your Secret Key. We never receive either of them.
What we store
- Your account email address, to sign you in and to send the confirmation email.
- Encrypted vault data: your items, vault names and keys, stored only as ciphertext. We can't decrypt it.
- Technical metadata that the service needs to sync: record identifiers, revision numbers, timestamps and sizes, and — if you share a vault — which accounts share it.
- Your public sharing key, so other Chestword users can share vaults with you.
What we don't do
- No analytics, advertising, tracking or third-party SDKs in the apps or the website.
- We don't sell or share your data.
- Password AutoFill and the browser extension never send anything to us; they work with the encrypted copy on your device.
Optional features
- Breach check (Lookout): only if you turn it on. The app sends the first 5 characters of a password's SHA-1 hash to Have I Been Pwned (api.pwnedpasswords.com). Your password, and which account it belongs to, are never sent.
- Claude.ai connector: only for vaults you explicitly share with Claude. For those vaults our server can decrypt items when Claude requests them, and every request is logged and visible to you. You can stop sharing or revoke access at any time.
- Claude on your Mac (Claude Desktop / Claude Code) talks to the Chestword app on your Mac directly, without our server.
- Camera is used only to scan the QR code on your Recovery Kit; images are not stored or sent.
- Face ID / Touch ID is handled by your device; we never receive biometric data.
Where your data lives
Encrypted data is stored with Supabase in the European Union (Frankfurt). The website is served by Cloudflare.
Deleting your data
You can delete your account and all its data at any time from Settings in the app or on the web. Deletion is immediate and permanent.
Contact
Greenancy · support@greenancy.nl