COCRYPT
Privacy Policy
The short version: the CoCrypt app does not send your personal data to Beyondend Dev. There are no accounts, analytics or tracking. Files and keys are processed on your device.
Last updated: May 28, 2026
1. Who We Are
CoCrypt is an application developed by Beyondend Dev, a company registered in Turkey at Zühtüpaşa, Rıfat Bey Sk. No:2 kat:3, 34724 Kadıköy/İstanbul. You can reach us at team@beyondend.dev .
2. What CoCrypt Is
CoCrypt is a multi-party file encryption application. It allows a file owner to encrypt any file so that all designated participants must physically approve — via Bluetooth proximity and biometric authentication — before the file can be decrypted. There is no server, no cloud storage, and no user account system. All operations are local or peer-to-peer.
3. Local Key Storage
During participant setup, CoCrypt creates an EC P-256 key pair on your device. The private key is protected on the device using the operating system’s secure storage mechanisms; it is not sent to Beyondend Dev or a remote server. Beyondend cannot read, retrieve or recover your key.
4. No Data Transmitted to Us
CoCrypt does not transmit any data to Beyondend Dev or to any third-party server. All key exchanges happen peer-to-peer over Bluetooth Low Energy — physically between users' devices, with no internet connection involved. Encrypted files ( .cvl ) are created and stored on your device and travel through whatever channel you choose (email, AirDrop, etc.). We receive nothing.
5. No Personal Data Collected
We do not collect any of the following:
Names, email addresses, or contact information
Device identifiers or hardware fingerprints
Usage data, analytics, or crash telemetry
Location data
The content of any file you encrypt or decrypt
Your cryptographic keys or any derived material
6. No Third-Party Services
CoCrypt uses no third-party analytics SDKs, advertising networks, crash-reporting services or tracking tools. It uses operating-system interfaces for Bluetooth, biometric authentication and secure storage, as well as file selection and sharing.
7. No Accounts Required
CoCrypt requires no account creation and no registration with Beyondend Dev. There is no login, no signup, and no user profile — which means there is no personal data associated with you in any system we control.
8. Biometric Data
CoCrypt uses the device’s fingerprint or face authentication to authorise unlock operations. The operating system processes biometric data. CoCrypt never accesses raw biometric data; it receives only a success or failure result.
9. Data Loss Warning
Because your private key exists only on your device and we have no copy of it, losing your device or uninstalling the app without backup means losing your ability to participate in future unlock sessions. We strongly recommend keeping your device secure. We cannot recover lost keys under any circumstances.
10. Children's Privacy
Since we collect no data from anyone, there are no special concerns regarding children's privacy. No data is collected from users of any age.
11. Changes to This Policy
If we ever change our data practices, we will update this Privacy Policy accordingly and notify users through the app or our website. The date at the top of this page indicates when the policy was last revised.
12. Contact
If you have any questions about this Privacy Policy, you can contact us at:
Beyondend Dev Zühtüpaşa, Rıfat Bey Sk. No:2 kat:3 34724 Kadıköy/İstanbul, Turkey team@beyondend.dev
Technical clarification · September 6, 2026
The legal source is dated May 28, 2026. Technical wording has been aligned with the current app: private keys are loaded by the app from secure storage, rather than being permanently confined to a hardware enclave. The 12-word recovery phrase can recreate the same key. Approvals are collected sequentially; a matching key on the unlocking device is handled locally. See the user guide for the full flow.
Website and support
This website stores an explicit EN/TR language preference in your browser under cocrypt.web.language. It does not query your location and contains no accounts, payments or analytics. Hosting may process standard request logs to deliver and secure the site. If you email support, we receive the email address and message you choose to send to answer your request. Never send recovery phrases or private keys.