Kryptos is a zero-knowledge personal vault for your most sensitive documents — passports, ID cards, driver's licences, payment cards, API keys, and private notes. Everything is encrypted on your device with AES-256. You can share entries with another Kryptos user by QR when you choose to. We never see your data, and we can't.

▸ ZERO-KNOWLEDGE BY DESIGN
Your vault is stored in a SQLCipher (AES-256) database. The encryption key lives in the Android Keystore — hardware-backed on supported devices — and is gated behind your biometric. There is no Kryptos server that holds your secrets. Even cloud backup uploads only opaque, encrypted bytes.

▸ SMART DOCUMENT SCANNING
Snap a passport, a driver's licence, or an ID. Google ML Kit's on-device OCR extracts the fields automatically, with locale-aware parsing for Malaysian and international formats. Camera frames never leave your phone.

▸ NFC CHIP READING
Read electronic passports (ICAO 9303 ePassport via JMRTD) and contactless EMV payment cards directly through NFC. Useful, fast, fully offline.

▸ BEAUTIFUL HERO CARDS
Each document type gets its own purpose-built, high-fidelity card UI — passports, driver's licences, credit cards, IDs, notes, API keys, tax numbers.

▸ PRIVATE ENTRY SHARING
Need to send an entry to someone else using Kryptos? Show a share QR code and they can scan it into their own vault with the correct category and fields filled in. It works across Android and iOS, without a Kryptos server in the middle.

▸ EXPIRY REMINDERS
Get notified before your passport, ID, or card expires. Scheduled offline via WorkManager — no cloud dependency.

▸ BIOMETRIC UNLOCK
Lock your vault behind Android Biometric (Fingerprint or Face Unlock), backed by hardware keystore.

▸ ENCRYPTED CLOUD BACKUP
Auto-backup your encrypted vault to your own Google Drive:
• Free: hidden Drive AppData folder
• Pro: a visible "KryptosBackups" folder, easier to manage and copy off-device

Google Drive can only see encrypted bytes. Nobody but you can decrypt the backup.

▸ MULTI-ACCOUNT ISOLATION
Share one device with family? Each Google account on the device gets its own fully isolated, separately encrypted vault. They never see each other.

────────────────

PRICING — SIMPLE & FAIR
• Free: store up to 10 entries, full features, no ads.
• Kryptos Pro: $1.99 one-time. Unlimited entries, visible Drive backup, priority support, and all future Pro features included.

No subscriptions. No recurring fees. Pay once, own it forever.

────────────────

WHY KRYPTOS
Most "secure" vaults are convenient because they hold your data on someone else's server. Kryptos picks the harder path: your data stays on your device, encrypted with a key only you control. The trade-off is that we can never reset your vault for you — but it also means no breach, leak, or subpoena exposes your secrets.

PERMISSIONS WE REQUEST
• Camera — to scan documents with OCR (on-device only)
• NFC — to read ePassports and EMV cards (on-device only)
• Biometric — to unlock your vault
• Internet — only for Google Sign-In, Drive backup, Play purchase verification
• Notifications — for expiry reminders

WE DO NOT
• Run a server that stores your vault contents
• Show ads or embed advertising SDKs
• Sell or share your data
• Hold a copy of your encryption key

Privacy policy: https://kryptos.faizalmzain.com/privacy.html