Privacy Policy

Effective July 7, 2026

Aye collects no data. This policy is short because there is nothing to disclose.

No data collection

The Aye app does not collect, transmit, sell, or share any personal data. It has no account system, no analytics, no advertising, and no tracking of any kind.

Everything stays on your device

Your identity key is generated and stored in your device's secure hardware and cannot be exported. Agent cards, permission grants, receipts, and recovery settings are stored locally on your device. The app makes no network requests.

What you choose to share

When you share an agent card, grant, or receipt using the share sheet, you decide who receives it. A shared grant includes an HTTPS verification URL that third parties can use to check whether the grant is still valid. Visiting that URL is an action taken by the holder of the grant, not by the app — the app itself never phones home.

Face ID and passcode

Face ID or your passcode is used only to gate local signing approvals on your device, through Apple's standard APIs. Biometric data never leaves your device and is never available to Aye.

Changes to this policy

If a future version of the app changes any of the above — for example, when optional service connectors ship — this policy will be updated before that version is released, and the change will be reflected in the App Store privacy label.

Contact

Questions about this policy: support@ayekey.com