Your vault stays on your computer.
Effective 12 October 2026. Questions: support@keyfold.app.
What stays on your computer
Everything in your vault: API keys, passwords, 2FA secrets, notes and project names. The vault is one encrypted file in a place you choose. Keyfold has no account, no server holding your data, no analytics and no crash reporter.
The only network connection
On the Mac, Keyfold asks once whether to check for updates daily. If you say yes, it downloads a small version file from GitHub, and only downloads an update if you click Install. GitHub sees your IP address, as with any download. No vault data, licence or identifier is sent. If you say no, Keyfold makes no network connections. On Windows, the Microsoft Store handles updates.
Detection features
Clipboard and .env folder detection are off until you turn them on. Text is matched in memory; nothing is stored unless you choose to save it.
AI agents and the command line
The keyfold command and the MCP server talk to the app over a local connection that only your user account can open. Every request needs your approval, and no tool returns a secret value to the AI model.
Your licence
A licence is a signed text containing your email, your plan and the purchase date. Keyfold checks the signature on your computer.
Buying Keyfold
Dodo Payments is the merchant of record: it processes your payment, handles tax and holds your card details. It shares your email, the product and a payment ID with Keyfold's licence server, which signs your licence, emails it to you from licences@keyfold.app, and keeps it for 7 days so the thank-you page can show it. Webhook IDs are kept for 30 days to avoid sending a licence twice. Cloudflare runs the licence server and email, and keeps short-lived request logs.
This website
keyfold.app counts visits with Cloudflare Web Analytics, which uses no cookies and doesn't track you across sites: it records pages viewed, referrer, country and device type. The pricing card asks licence.keyfold.app for the current launch price. The live demo runs entirely in your browser with made-up data and sends nothing. The "Ask AI" links open the assistant you choose with a question about Keyfold.
Messages to support@ and security@keyfold.app are forwarded to the developer's mailbox and kept to answer you.
Changes and contact
If this policy changes, the new version will be here with a new date. Keyfold is made by Suman Kumar (CWK Solutions). Contact: support@keyfold.app.