Mosaic is built so that we never have anything of yours to protect. Your secrets are split into shares on your device, and they never pass through a server of ours.
The short version
- Mosaic has no account, no signup and no Mosaic servers holding your data.
- Secrets are split into shares with Shamir’s Secret Sharing on your device, before anything leaves it. A single share reveals nothing about the secret.
- You decide who receives each share and how it is sent. We never see the shares, the secret or who you sent them to.
- We don’t sell data, show ads or use third-party trackers in the app.
What stays on your device
Everything you create in Mosaic — the secret itself, the shares made from it, the threshold you choose and the names you give your trusted contacts — is stored locally on your device. Where your platform offers encrypted storage, Mosaic uses it.
The username you choose is also stored on your device. It is shown to the people you exchange shares with, so they can tell whose shares they’re holding. It is never sent to us.
Recovering a secret happens on your device too. Once enough shares are brought back together, the secret is rebuilt locally. It is never reconstructed anywhere else.
Sending shares
You give each share to someone you trust directly, device to device, either by a QR code they scan or over an encrypted connection on your local network. Shares don’t pass through the internet or through us. A single share reveals nothing about your secret, so even an intercepted share is useless on its own.
Information we don’t collect
Without accounts or servers, there is no profile of you for us to keep. We don’t collect your name, email address, phone number, contacts, location or any part of your secrets or shares.
App store and platform data
When you download Mosaic, the app store you use (for example, Apple’s App Store) processes your purchase and download under its own privacy policy. It may give us aggregated, anonymised statistics such as download counts, or crash reports you have agreed to share. None of this includes your secrets or shares.
This website
This website is a static page. It doesn’t use cookies, analytics or advertising trackers. Like any web host, our hosting provider may keep standard server logs, such as IP addresses and request times, for a short period so it can run the service securely.
Children
Mosaic is not directed at children under 13, and we don’t knowingly collect information from anyone. Because the app collects no personal data, there is nothing identifying for us to hold about any user.
Your rights
Depending on where you live, you may have rights to access, correct or delete personal data held about you. Since your Mosaic data exists only on your device, you control it directly. Delete a single secret in the app, or use Settings → Delete Data to remove your username and every secret and share on the device. Deleting the app alone may not remove your data, because iOS can keep it in the device’s secure keychain after the app is removed. If you think we hold something about you, get in touch and we’ll look into it.
Changes to this policy
If this policy changes, we’ll update it here and change the date at the top of the page.