Privacy Policy — Skylatek One

At Skylatek One, privacy is not a feature — it is the foundation of everything we build. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it. We are committed to full transparency and to your rights under UK GDPR and the Data Protection Act 2018.

1. Who we are

Skylatek One Ltd is a company registered in England and Wales (Company No. 13456789), with its registered office at 1 Canada Square, Canary Wharf, London E14 5AB. We are the data controller for the personal data we process about you. You can contact our Data Protection Officer at [email protected].

2. What data we collect

We collect the minimum data necessary to provide our services. This includes: your email address and name when you create an account; encrypted content you store in our apps (which we cannot read); usage metadata such as login timestamps and IP addresses for security purposes; and payment information processed by our payment provider (we do not store card details).

3. How we use your data

We use your data to provide and improve our services, to authenticate you, to send transactional emails (such as password resets), and to comply with our legal obligations. We do not use your data for advertising. We do not sell your data to third parties. We do not profile you for marketing purposes.

4. Zero-knowledge encryption

The content you store in Skylatek Mail, Calendar, and Passwords is encrypted on your device using keys derived from your password before it is transmitted to our servers. This means we cannot read your content — even if compelled by law enforcement. We can only provide encrypted ciphertext, which is meaningless without your key.

5. Legal basis for processing

We process your personal data on the following legal bases: performance of a contract (to provide the services you signed up for); legitimate interests (to maintain security and prevent fraud); legal obligation (to comply with UK law); and consent (for optional communications, which you may withdraw at any time).

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law. Encrypted content is deleted immediately upon account deletion.

7. Your rights under UK GDPR

You have the right to access, rectify, erase, restrict, or port your personal data. You have the right to object to processing and to withdraw consent at any time. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise your rights, contact [email protected].

8. International transfers

We store your data on servers located in the United Kingdom and the European Economic Area. Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

9. Cookies

We use only essential cookies required for authentication and security. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. For full details, see our Cookie Policy.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the app. The date of the most recent revision is shown at the top of this page.

Questions about this policy? Contact our Data Protection Officer at [email protected] or write to us at Skylatek One Ltd, 1 Canada Square, Canary Wharf, London E14 5AB.