Privacy · Bayria

01

What we hold

Email, billing identity, device public keys, region preference, account.country_code (sourced from App Store storefront → Play regionCode → Cloudflare CF-IPCountry → user-declared; XX fallback; Tor → T1). For each signed-in device we keep the IP address and approximate location (city and country) it last signed in from, so you can spot devices you don’t recognise. For Mail and ticket bodies we hold ciphertext encrypted at rest: each object is encrypted under its own key, and that key is wrapped by a server-held master key. Vault items stay on your device.

02

What stays end-to-end

Calls and texts are not end-to-end encrypted: they go through our telephone provider and mobile carriers like any phone call. Vault will be end-to-end encrypted with keys made on your devices when it launches.

03

Server-trust posture

For Mail, ticket bodies, and any other content we hold for you, an admin read is technically possible. We gate every read on a dual-key ceremony and a PII redactor, and we record every access in the immutable audit log. We are a server-trust SaaS, not zero-knowledge.

04

How long we keep it

Connection counters per region: 14 days. Billing records: 7 years (statutory). Crash logs: 30 days, scrubbed. Lawful-intercept records: 30 days from the closure of the order, then destroyed.

05

Where it lives

Your account, billing and support data are stored on our servers in the United States. VPN servers are in the locations you pick in the app. We do not currently keep a separate copy of EU residents’ data in the EU.

06

Subpoenas

Disclosed in our live transparency report: how many orders we were served, how many we complied with, and how many are under seal.

07

Your rights

Article 15 signed export (everything we hold for you). Delete your account from Settings in the app or from the web account portal. Article 17 erasure (deleting your account erases your data across every Bayria feature). Portability, complaint to your DPA. Self-serve from Settings → Account.

08

Country availability

Some features may be unavailable in your country per local regulation. Foundational surfaces (auth / billing / support / audit) are always on; pluginable features (VPN / eSIM / Call / Mail / Vault / Drive / Identity / Agents) follow the per-country availability matrix in your app.

09

Lawful-intercept capability

Bayria.com, LLC (Dover, DE) can be compelled by a US court of competent jurisdiction — or, for EU users, via MLAT — to enable per-account logging on a named user. For the named account only and for the duration of the order we may capture: VPN destination IPs, DNS queries, request and response headers, request bodies, and Mail object plaintext (decrypted server-side with our master key). Every read is dual-key-gated, PII-redacted, and recorded in the immutable audit log; counts are published in the transparency counter.

10

Children

Bayria is for adults. You must be 18 or older to create an account, and we don’t knowingly collect data from anyone younger. If you believe a child has given us data, write to [email protected] and we’ll delete it.

11

Who processes data for us

Stripe (card payments), Apple and Google (sign-in), and our eSIM issuers and mobile carriers (to activate plans). Each gets only what its job needs. We don’t sell your data or share it for advertising.

12

International transfers

Our primary servers are in the US. When we move EU/UK users’ data to the US we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum), plus the safeguards above.

13

Do Not Track

Our sites don’t track you across other websites and don’t run ad or analytics trackers, so we treat every visit the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

14

When you delete your account

After a 7-day grace period we erase your profile, devices and keys, mail aliases, call data, eSIM profiles and support tickets. We keep invoices and billing records for 7 years because tax law requires it, and security audit entries are anonymised rather than deleted. Delete from Settings in the app or from the web account portal.

The privacy policy fits on a page.