Zentra Desktop Application
Zentra is a local-first desktop application for storing and managing API keys and secrets. This privacy policy explains what data the application collects, how it is used, and your rights.
Data Collected
Zentra collects the following data:
- Vault data — secrets, project names, tags, and notes you choose to store, all encrypted with AES-256-GCM.
- Application logs — crash reports and error logs stored locally for crash recovery.
Zentra does not collect:
- Your master password — it is never stored, transmitted, or recoverable.
- Personal identifiers such as your name, email address, or IP address.
- Usage analytics, telemetry, or tracking data.
- File system data beyond what you explicitly choose to import/export.
How Data Is Used
- All vault data is encrypted on disk using AES-256-GCM with an Argon2id-derived key.
- Your master password is used only to derive the encryption key at unlock time and is immediately cleared from memory.
- When using the Key Validation feature, API keys are sent to their respective providers for validation — this is done directly from your machine.
- When using the GitHub Secret Scanning feature, repository URLs you provide are scanned via the GitHub API.
- When using Google Calendar sync, event data is sent to Google's servers based on your OAuth consent.
Local Storage
All vault data is stored locally in an encrypted SQLite database on your device. The database remains encrypted at rest and is only decrypted in memory while the vault is unlocked. You can export an encrypted backup at any time with a custom backup password.
Third-Party Services
Zentra integrates with the following third-party services, all optional and opt-in:
- GitHub API — for secret scanning and key validation. Only data you explicitly choose to scan is sent.
- Google Calendar API — for expiry reminders. OAuth consent is required and can be revoked at any time.
- API providers — when validating API keys, a test request is sent to the respective provider.
No data is sold, shared, or sent to any server without your explicit action.
Updates
Zentra checks GitHub releases for updates. This request discloses your current version to GitHub but does not transmit any personal data.
Your Rights
You can:
- View, edit, or delete any secret at any time within the application.
- Export an encrypted backup or plain-text .env files.
- Delete all data by deleting the application data directory.
- Revoke Google Calendar integration at any time.
Changes to This Policy
If this policy changes, the “Last updated” date at the top will be revised.