Security and privacy

Privacy by architecture. Security by design.

Keryx is built to know as little as possible about where you are, while protecting the account and service data it needs to work. Here is what that means in practice — plain summary first, technical detail below.

The short version

  • Your location

    Keryx does not send your GPS coordinates or a history of your movements to our servers. Finding where you are on the map and calculating routes happen on your device.

  • Your local data

    Downloaded maps and the pins, routes and trips you save are kept on your device, so they are there when you are offline.

  • Your sync data

    If you turn on sync, your data is encrypted on your device before it is uploaded. We store it, but we cannot decrypt it.

  • Your account

    To run the service we do handle your account, subscription and a few operational details. That is covered below and in the Privacy Policy.

What Keryx knows — and what it does not

Keryx may know

  • Your account details — email address, and the phone number used to verify a trial
  • Your subscription and billing status
  • Referral codes you signed up with
  • Which map regions you download, so alerts can be matched to them
  • The devices signed in to your account
  • Operational and security information needed to run the service, such as server logs
  • Crash reports, if you leave crash reporting on (you can turn it off)

Keryx does not receive

  • Your current GPS coordinates
  • A continuous history of where you go
  • The contents of your encrypted sync data

Saving a plan is not the same as being tracked. Pins, routes and trips you choose to save do exist — on your device, and in encrypted form on our servers if you turn on sync.

No third-party advertising or analytics trackers. We do not sell personal information.

How your data is protected

Encrypted connections
Connections to Keryx use HTTPS — TLS 1.3 by default, with TLS 1.2 kept for older browsers — and browsers are told to use nothing else (HSTS). The Android and iOS apps refuse unencrypted connections to our servers.
End-to-end encrypted sync
Synced pins, collections, area studies, routes, trips, tracks, destinations, vehicle profiles and preferences are encrypted with AES-GCM-256. The key is derived on your device from your sync passphrase with PBKDF2-SHA256 (600,000 iterations for new setups). Our servers store only the encrypted result.
Encryption on your device
Pins, destinations, routes, trips, tracks, vehicle profiles, preferences and sign-in tokens are stored encrypted with AES-GCM-256. The key is kept in your device’s secure key storage where the platform provides one.
Passwords
Passwords are stored only as bcrypt hashes, never in readable form.
Sign-in protection
Short-lived access tokens, an account lockout after five failed sign-in attempts, request rate limiting, and SMS verification when starting a trial.

By platform

Android

  • Encryption key held in the Android Keystore
  • HTTPS required for connections to Keryx

iOS

  • Encryption key held in the iOS Keychain
  • App Transport Security enforced for connections to Keryx

Windows, macOS and Linux

  • Encryption key held in Windows Credential Manager, the macOS Keychain or the Linux keyring

Web

  • Encryption key created by the browser as non-exportable
  • Browser storage is less isolated than an installed app

Infrastructure and monitoring

  • Keryx runs on DigitalOcean in a single region. Maps and app downloads are delivered through Cloudflare's content delivery network.
  • The application runs in containers as an unprivileged user.
  • Regular backups.
  • We run our own security audits against the site.
  • 99% uptime, including brief restarts when we ship updates.
  • Automated 24/7 monitoring: error tracking, availability checks, and alerts to our team when something breaks.

Our status page does not yet show live monitoring data.

If something goes wrong

We investigate security reports and incidents, fix what we find, and notify affected users as required by applicable law.

Privacy rights and certifications

We do not hold formal security certifications such as SOC 2 or ISO 27001. We rely on widely reviewed, standard cryptography, applied consistently.

You can request a copy of your data, delete your data, or delete your account from Settings or through our privacy request page. The Privacy Policy explains the rights available to you — including under GDPR and the CCPA — and how to use them.

Privacy Policy Make a privacy request

What encryption cannot do

  • If your device is unlocked, compromised or running malware, the data on it — and in the Keryx app — may be exposed. Encryption reduces that risk; it does not remove it.
  • Sync is only as strong as your passphrase. Choose a long one you do not use elsewhere.
  • Two-factor sign-in is not available yet.

Good habits

  • Use a strong, unique password and sync passphrase.
  • Keep a screen lock on your devices.
  • Keep Keryx and your operating system up to date.
  • Sign out on shared or public devices.

Report a security issue

If you believe you have found a vulnerability, email support@keryxmaps.com with the subject “Security Disclosure”. Include enough detail for us to reproduce it, and please give us a chance to fix it before making it public. We will acknowledge legitimate reports and keep you informed. We do not currently run a bug bounty.

Contact Data sources Terms