Privacy Policy

Skellig keeps your documents and notes in one private place. This policy explains what we collect, why, who helps us run the service, and the choices you have. Skellig is run by Point Two Global LLC FZ, Dubai, United Arab Emirates ("we"). Questions: hello@skellig.app.

What we collect

• Your account: name, email address, password (stored only as a one-way hash), and the @handle you choose.
• Your documents: the files you add and the details filled in for them (title, type, owner, number, issue and expiry dates, notes, folders and spaces).
• Your notes: the title, text, formatting and colour of each note, and notes other people send you, with their name and @handle. When you import notes, the file is read on your device and only the notes are sent to us, plus any pictures and PDFs from them that you choose to add to Documents.
• Private: only what your device has already locked, which we cannot read, plus how many items you keep there, whether each is a note or a photo or document, their size, when they were added and changed, a line in your Activity when you add, move or delete an item (never what it says), and which emergency contacts you chose for which part of Private. We also keep the copies your device sealed for those contacts.
• People you add: names and email addresses of family members, emergency contacts and people you share with or send to, so we can invite or notify them. If you add a backup email for the silence check, we keep that address and send it only a confirmation, any test you ask for, and silence-check emails.
• Email to Skellig: when you forward an email to your Skellig address, its PDFs and photos wait in your Inbox, with the sender's address and the subject, until you keep or decline them. The email itself is deleted at once.
• Payments: your plan and billing status. Card details go straight to Stripe; we never see or store your card number.
• Activity: a log of sign-ins, uploads, opens, downloads and shares on your account, which you can see in Activity. We keep IP addresses for security for up to 90 days.
• How you use Skellig: when you last used it, and counts such as how many documents you have, how much storage and AI you use, and your plan. The Skellig team sees these for each account, with your name and email. We may also be notified when someone opens Skellig or adds a document, without the document's name. These views show no file, document detail or note. If you turn on the silence check, it uses when you last used Skellig; if your emergency contacts are told, they see that date.
• Devices: for the iPhone app, a passkey for Face ID or Touch ID and, if you allow it, a notification address. Offline copies, and documents you add without internet until they are sent, stay on your iPhone, encrypted.

We do not use advertising trackers and we do not sell or rent your data.

Our public website counts visits with Cloudflare Web Analytics: which pages are opened, from which country, on which kind of device and browser, which site sent you and how fast the page loaded. It sets no cookies and does not build a profile of you. Like any website request, it reaches Cloudflare with your IP address and browser details; Cloudflare says it does not use them to identify or track you, and keeps visit counts in aggregated form under its own retention rules. It is not used inside the app or in a browser where you are signed in.

How your documents and notes are protected

• Each person has their own encryption key. Your files, their earlier versions, the text read from them, and the title and text of your notes are stored encrypted with that key.
• Your key is stored only in locked form: locked with your password, with your recovery code, with each iPhone you set up with Face ID or Touch ID and, if you name an emergency contact, in a copy sealed to their key. While you are signed in, the key is held for that session only.
• For accounts opened since 26/10/2026, nobody at Skellig holds a key to your files: if you lose your password and your recovery code and all your devices, we cannot unlock your files for you.
• Some accounts opened by invitation before 26/10/2026 are not yet encrypted with their own key. Their files and notes are encrypted with it once their owner chooses Lock My Documents in Settings. These accounts may also keep a rescue copy of the key, held offline by the founder. You can ask us to remove it.
• The details of each document (title, type, owner, number, issuer, dates, notes, file name, folder and the AI summary) are not encrypted with your key, so that search, reminders and filing work.
• Private goes further: notes, photos and documents there are locked on your device with your Private code, or Face ID on iPhone, before they are saved, so we cannot read them and the AI never sees them. Skellig runs in your browser, on iPhone too, so this relies on the app code we send each time you open it. A document or note you move into Private from Documents or Notes was with us before: it is removed from there at once and from our backups within 35 days, and if the AI read it before you moved it, that reading had already happened.
• Copies kept on your iPhone for offline use are encrypted and open only after Face ID or Touch ID.

How we use AI

Our AI provider is Anthropic. AI reading is on unless you turn it off, in Settings or each time you add documents. When it is on, we send the pages of a document you add to the AI to read its type, owner, number and dates. When it is off, a new document is not sent for reading until you tap Read with AI on it, or Make Them Searchable in Settings.

When you use Ask, we send your name, your question and the earlier questions and answers in that chat, the details of all your documents, the text of those that match, and your own notes (in full for those that match, the start of the others). This happens whether AI reading is on or off. Nothing in Private is ever sent to the AI. The AI provider processes what we send to give us the answer and does not use it to train its models.

Why we use your data

• To run the service you signed up for (contract).
• To send reminders, silence-check emails, security messages and receipts (contract).
• To keep accounts safe and stop abuse (legitimate interest).
• To understand how Skellig is used and keep it running well (legitimate interest).
• To count visits to our public website, without cookies (legitimate interest).
• To meet legal and tax duties (legal obligation).
• Occasional product news by email (legitimate interest). You can say no when you sign up, unsubscribe from any of these emails in one click, or switch them off in Settings. Children’s accounts never get them.

Who we share data with

Only with providers that help us run Skellig, under contracts that limit their use of it: hosting (Cloudways / DigitalOcean), AI reading (Anthropic), encrypted backups (Backblaze), email sending (Brevo), domain, security, incoming email and website visit counts (Cloudflare), payments (Stripe) and iPhone notifications (Apple). Google Drive and Dropbox are used only when you choose to import from them, and only for the files you pick.

We share data with authorities only when the law requires it. Where allowed, we tell you first.

You control sharing inside Skellig: people see your documents only if you share a space or household with them, send them a link or a document, or make them an emergency contact. A note reaches someone only if you send it to them. What of Private an emergency contact can open is your choice, and only after the silence check has told them, they have asked for access and their waiting period has passed.

Anyone on Skellig who types your exact @handle sees your name, so they can send you documents or notes. If you add your calendar link to a calendar app, the renewal dates of your documents, and their titles and renewal steps unless you turn off Show document names, go to that calendar's provider.

Where data is stored

Our servers are in Frankfurt, Germany (DigitalOcean, through Cloudways). Some providers process data in other countries, including the United States. Where the law requires it, we use contracts that protect data sent abroad.

How long we keep it

• Your documents, notes and Private: until you delete them or close your account.
• After you close your account: deleted from the live service at once and from encrypted backups within 35 days.
• Your backup email: until you remove it or close your account.
• Billing records: as long as tax law requires.
• IP addresses in security logs: up to 90 days. Your Activity history: while your account exists.

Your choices and rights

You can see, correct and delete your documents and notes at any time, download your documents with Download Everything, share or copy your notes, and close your account from Settings. Download Everything does not include notes or Private. You can turn AI reading and the silence check off in Settings. You can also ask us for a copy of your data, to correct or erase it, or to restrict or object to how we use it. Write to hello@skellig.app. If you are in the EU or UK, you can complain to your data protection authority.

Children

Account holders must be 18 or over, except children aged 13 to 17 who join a Family plan by invitation from a parent or guardian, with that parent's consent (16 to 17 where local law requires it, for example in the EU). A parent can also keep documents for children of any age in their own account, and is responsible for that information.

Changes

If we change this policy in a way that matters, we email you before the change takes effect.

What changed on 3 November 2026

• Notes and Private: what we keep, how they are protected, and how long we keep them.
• The AI: AI reading can be turned off, and Ask uses your documents and everyday notes; Private is never sent to it.
• The silence check: when you last used Skellig, and your backup email.
• How you use Skellig, what the Skellig team sees for each account, and Email to Skellig.
• Sharing: households, sending documents and notes, your @handle and your calendar link.
• Where our servers are: Frankfurt, Germany.