Privacy policy

Who this policy covers

This privacy policy applies to the PGPer mobile application and this website. PGPer is developed and maintained by Eddy Chandra, an independent developer. For privacy questions, contact pgper@luckierpets.com.

PGPer helps you encrypt and decrypt files, exchange OpenPGP keys and encrypted files, and scan documents into PDFs. You do not need a PGPer account.

Information used by the app

The app accesses the documents, images, encrypted files, and key files you choose to import or open. It processes camera images when you scan documents or public-key QR codes. This content is processed locally on your phone.

If you create or import a key, PGPer stores the encrypted private key, public key, fingerprint, and associated identity information on the device. Names and email addresses entered during key creation become part of the key identity. Recipient public keys and their identity information are stored locally when you add them.

PGPer stores your theme, language, and security preferences locally. It does not operate a server to receive your documents, private keys, or passphrases. The current app has no advertising, behavioral analytics, or developer-operated crash-reporting service.

Camera and phone authentication

Camera access is used to capture document pages and scan public-key QR codes. You can revoke camera permission in your phone settings; scanning will then be unavailable. Importing and encrypting existing files does not require the camera.

The app uses the system file picker for files and export destinations you select. PGPer does not request your contacts or location.

Phone authentication is required to decrypt files. The operating system handles Face ID, fingerprint, and PIN/passcode checks. PGPer receives the authentication result, not your biometric templates or phone PIN/passcode.

Private keys and remembered passphrases

Private keys remain protected by their OpenPGP passphrase and are kept in OS-backed secure storage. Remembering your key passphrase is optional. Supported devices use a separate OS-authentication-gated store to retrieve a remembered passphrase; otherwise you enter it manually.

Remembered passphrases are restricted to this device and are not intended to migrate or synchronize to another phone. Turning off Remember key passphrase removes the saved copy after authentication. Keep your encrypted private-key backup and passphrase somewhere safe.

Decryption necessarily makes the passphrase and plaintext available to the app while in use. No security measure guarantees protection on a compromised device.

Your operating system may back up eligible app data or secure-storage items according to its settings. PGPer disables Android app backup; remembered passphrases use device-only protection. Keep your own encrypted private-key backup rather than relying on a phone backup.

Exports, recipients, and other apps

PGPer encrypts locally before exporting protected output. You choose recipients in PGPer and the export destination through the system file picker, which may include cloud providers you have configured. PGPer does not manage those providers or automatically synchronize your documents.

Exporting a public key reveals its identity information and fingerprint to whoever receives it. Sharing an encrypted file gives recipients with a matching private key the ability to decrypt it. File names and information visible to the destination may also reveal details.

You can export unencrypted scan PDFs. The phone viewer used for decrypted content may also allow saving or sharing unencrypted copies. Anyone who obtains those copies may read them. Other apps, recipients, cloud providers, and the operating system handle their copies under their own terms and privacy practices.

Retention, deletion, and your choices

Scans and encryption output are held in memory or temporary working files while a task is in progress. PGPer keeps no persistent document library. Temporary decrypted previews are removed after viewing; interrupted previews are cleaned up on a later app launch. Device or system failures can delay cleanup.

Keys, recipient records, and preferences persist locally until removed or app data is cleared. You can remove recipient keys in the app and stop remembering a passphrase in Settings. Android app-data clearing removes local app data. Uninstalling removes ordinary app data, but secure Keychain items on iOS may remain; uninstalling alone should not be treated as guaranteed deletion of all secure-storage entries. Contact us for help with persistent local key data. We cannot remotely access or erase your phone’s data.

Exported files, encrypted key backups, clipboard copies, and copies saved by other apps are outside the temporary-file cleanup. Delete them in their respective locations. If you explicitly copy a passphrase, PGPer uses a protected clipboard with an expiry target, but copies made elsewhere remain outside its control.

PGPer has no user account to delete. Before removing key data, make sure you have an encrypted private-key backup and its passphrase. Without the required key and passphrase, encrypted files may become unreadable.

This website and Cloudflare

This website is hosted on Cloudflare Pages. Your browser sends information such as your IP address, requested page, and browser/network information to Cloudflare so it can deliver and protect the website. Cloudflare processes this information under its privacy policy and the applicable hosting and security configuration.

The website itself contains no advertising, analytics scripts, contact forms, third-party fonts, or application cookies. Cloudflare may apply its own security processing. Website requests do not upload your PGPer files or keys.

Cloudflare privacy policy

If you contact us

If you send an email, we receive the address and information you include, and use them to respond to your inquiry. Email providers also process messages to deliver them. Send only information needed for your question; never send private keys or passphrases.

We retain correspondence only as needed to handle the inquiry and meet applicable obligations. You may request access, correction, or deletion of information you sent us by contacting pgper@luckierpets.com. We will respond as required by applicable law.

Changes to this policy

We may update this policy when the app or its data practices change. The effective date above identifies the version shown here. Material changes will be explained through an appropriate app or website notice.