Legal
Privacy policy
A lawyer reviews this text the week of October 20, 2026; the entity and governing law lines may change.
What enveigh holds about you, what it cannot read, and how to delete it.
The short version
- The enveigh apps for Mac and Linux keep your secrets on your computer. They need no account and send no analytics.
- Your enveigh Cloud vault is end-to-end encrypted. We cannot read it, and we cannot reset it.
- Requests you send with an enveigh key pass through our proxy, so we see them. We do not store the prompts or the responses.
- We do not sell your data.
Who we are
Ian Muench, doing business as enveigh ("we", "us") runs enveigh. This policy covers the enveigh apps, this website, and enveigh Cloud at app.enveigh.com.
The enveigh apps
The Mac app and the Linux edition store your secrets only on your computer. They send us no analytics, telemetry, or crash reports. The Mac app checks enveigh.com for updates, which shows us your IP address and app version. The apps contact enveigh Cloud only if you sign in to it.
This website runs on Cloudflare and sets no tracking cookies.
Your vault
Secrets you put in enveigh Cloud are encrypted on your device before upload. Only your devices hold the keys. Our server stores ciphertext and cannot read it. For the same reason, we cannot reset your vault or recover it. If you lose your passphrase and your devices, your Recovery Kit is the only way back in.
One exception is your choice: a Managed environment is one the server can read, so it can deliver values to your deployments. Every other environment stays end-to-end encrypted.
enveigh keys and the proxy
An enveigh key lets an agent or a build use an AI provider without holding the real provider key. In proxy mode, each request goes through proxy.enveigh.com. Our server sees the request, adds your real provider key, and forwards the request to the provider. So the server can use that provider key, and end-to-end encryption does not apply to it.
We do not store or log prompts or responses. For each request we record metadata: which key made it, the provider, the model, token counts, cost, status, duration, and time.
Account data we hold
- Your email address and name.
- Sign-in data: the public keys of your passkeys, a hash of your password if you set one, and your two-factor settings. If you turn on text message codes, we store your phone number encrypted.
- A record of each device you connect, with its public keys.
- Audit metadata: who did what, on which device, and when. Sign-in sessions record IP address and user agent.
- Workspace names, environment names, members, roles, and usage counts. These are not end-to-end encrypted.
- Invite requests: the email address, name, and note you give us.
Service providers
| Provider | What it does |
|---|---|
| Cloudflare | Hosting and storage. Your data lives on Cloudflare. Turnstile runs the captcha. |
| Resend | Sends email, such as codes, invites, and notices. |
| Telnyx | Sends text message codes, only if you turn them on. |
| Sign-in, only if you choose it. | |
| Stripe | Billing. Stripe holds your card details. We never see them. The beta is free, so Stripe receives nothing during it. |
AI providers you connect, such as Anthropic, OpenAI, or OpenRouter, receive the requests you send them. Their own privacy policies apply.
How we use it
We use this data to run enveigh Cloud, keep it secure, send email you need, answer support requests, and bill you once paid plans open. We do not sell or rent your data. We do not use it for advertising or to train AI models.
Google sign-in
If you sign in with Google, we receive your name, email address, and Google account identifier. We use them only to create your account and sign you in. We share them with no one except the providers above. Our use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Deleting your data
To delete your account, open Settings in the web app and choose Leave enveigh Cloud. You can download all your data first. We delete your account and every workspace only you belong to after 14 days. You can cancel until then.
Some records stay after deletion. Our database keeps 30 days of history for disaster recovery. Billing records stay for tax purposes, without your name or email. A shared workspace keeps the entries you wrote, under a device key. We keep a record that the deletion happened, with no name, email, or key.
Your rights
You can see, download, correct, and delete your data in the web app. You can also write to privacy@enveigh.com to ask for access, correction, deletion, or a copy. Laws such as the GDPR or the California Consumer Privacy Act can give you more rights. We will not treat you differently for using them.
Children
enveigh is not for children under 13. We do not knowingly collect data from them. If you think a child under 13 gave us data, write to us and we will delete it.
Changes
If we change this policy, we update the date at the top. If a change is significant, we email account holders before it takes effect.
Contact
enveigh, Ian Muench. support@enveigh.com for help, privacy@enveigh.com for privacy requests.