Privacy policy

The short version: your data stays on your phone, encrypted with keys we cannot access. The only things that leave it are messages you choose to send, and those are end-to-end encrypted.

Who we are

PrivaShred is developed by Scott Atkins in Western Australia and published on Google Play under the developer name Luvora Tech. Contact: support@privashred.com.au. This policy covers the PrivaShred Android app and privashred.com.au. It is written to meet the Australian Privacy Principles (Privacy Act 1988) and Google Play’s User Data policy.

1. No account, no tracking

PrivaShred has no sign-up, no advertising, no analytics and no third-party tracking or crash-reporting SDKs. We never sell or rent data.

2. What stays on your phone

Settings, scan results, history, wipe certificates, the vault, the password manager, Messenger contacts and conversations are stored only in PrivaShred’s private storage on your phone, encrypted with a key held in the phone’s secure hardware (Android Keystore). We cannot see any of it.

3. Messenger (only if you use it)

Messages and files are end-to-end encrypted on your phone before they leave it. They pass through our relay server, hosted by Cloudflare, Inc. (our hosting provider, which processes data only on our instructions), as unreadable ciphertext. The relay stores: (a) a random-looking mailbox ID derived from your public key, (b) your public key, and (c) encrypted messages waiting for delivery. Messages are deleted as soon as your contact’s phone collects them, or when their self-destruct time passes, and are never kept longer than 7 days. The relay does not know your name, phone number or email and cannot see who sent a message. Like any internet service, Cloudflare processes your IP address to deliver the connection; we do not store or log it. Cloudflare may process data outside Australia (for example in the United States) under its own security and privacy commitments.

4. Password breach check (only if you use it)

Your password is hashed on your phone and only the first 5 characters of that hash are sent to the Have I Been Pwned service (k-anonymity). Your password itself never leaves your phone.

5. Purchases

Subscriptions are processed by Google Play. We receive only the purchase status from Google; we never see your payment details. Google’s privacy policy applies to the payment.

6. Permissions

PrivaShred uses: the Android file and folder pickers (you choose exactly what it can access), internet access (Messenger, breach check and purchases), biometrics (optional, for app unlock and hidden messages), and the list of launchable apps, checked only on your phone for the spyware audit. It does not access your contacts, SMS, call log, location, microphone or camera.

7. Sharing

Data leaves PrivaShred only when you tap Share, Export or Send and choose the destination. We do not share data with anyone else, except where required by Australian law.

8. Security

Data on your phone is encrypted with AES-256-GCM under hardware-protected keys. Messenger traffic is protected by TLS plus end-to-end encryption, with a fresh key for every message and a hardware-held signing key.

9. Your rights and deletion

You can delete any item in the app at any time. Settings → Reset, Destroy vault, the kill switch and the decoy PIN destroy your data on the phone and erase your Messenger mailbox on the relay. Uninstalling PrivaShred removes all of its data from your phone; any Messenger mailbox left behind holds no readable data and its messages expire within 7 days. To ask about, access or correct personal information, or to request deletion of a relay mailbox, email support@privashred.com.au. We reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. This website

privashred.com.au uses no cookies, analytics or trackers. It is hosted on Cloudflare Pages and loads fonts from Google Fonts, so those providers process your IP address to deliver the page. If you email us, we use your email only to reply and to send an early-access invite you asked for.

11. Children

PrivaShred is not directed at children under 13 and we do not knowingly collect their information.

12. Changes

We will post any change to this policy here and in the app before it takes effect. Version 1.2, effective 2 October 2026.