April 9, 2026
Privacy policy
Yasin Yavuz ("I", "me", "my") operates the Sealed mobile application ("the App"). This privacy policy explains how your information is handled when you use the App.
The short version: Sealed is local-first. Capsule content is stored on your device and, if iCloud sync is enabled on your Apple account, synced through Apple CloudKit. I don't run content servers and can't read your capsules, photos, voice notes, or any other content you create. The only data processed externally is limited purchase data required for Sealed + purchases and restores through Apple and RevenueCat.
1. Data Controller
Yasin Yavuz
Email: yasin@faylitlabs.com
For the purposes of the EU General Data Protection Regulation (GDPR / DSGVO), I am the data controller.
2. What Data Is Processed
2.1 Content You Create (Local-First, Optional iCloud Sync)
When you create a capsule, the following data is stored locally in the App:
- Text content you write
- Photos you select from your library or capture with the camera
- Voice recordings you make
- Capsule titles, creation dates, and unlock dates
- Your sender name (if you choose to send a capsule to someone)
If iCloud sync is available and enabled for Sealed on your device, Apple CloudKit also stores a synced copy in your personal iCloud account so your capsules can appear across your devices.
I have no access to your capsule content. Sealed does not operate its own content servers.
3. Legal Basis for Processing (GDPR Article 6)
Legal basis under GDPR Article 6: (1) performance of a contract for core app functionality and purchase restoration; (2) consent for camera, microphone, photo library, and notification permissions.
4. Data Storage and Security
Data is stored using Apple frameworks (SwiftData, file system, UserDefaults, and CloudKit if enabled). Data is protected by device encryption, app sandboxing, and passcode or biometric lock.
5. Data Sharing and Third Parties
Sealed does not sell personal data and uses no ad or cross-app tracking SDKs. Third-party services are Apple (iCloud and App Store) and RevenueCat for purchase validation and entitlement restoration.
6. Data Retention and Deletion
Capsules and preferences remain until you delete them. Deleting capsules removes content locally and syncs deletions to iCloud when enabled. Deleting the app removes local data from that device.
8. International Data Transfers
If you are in the EU/EEA, you can exercise rights including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable. Most rights are exercised directly in app.
7. Your Rights Under GDPR
For App Store purchases and RevenueCat entitlement restoration, limited purchase-related data may be processed outside the EU/EEA under provider transfer mechanisms.
9. Contact
If you have privacy questions or requests, contact: yasin@faylitlabs.com