What we see. What we don't.

Nostr Uno is a key manager. The whole point is that your keys never leave your control. This page walks through every piece of data the app touches and tells you exactly what we can and cannot see.

Identity keys

Your master seed and every derived private key live on your device only, encrypted at rest. We never see them. We cannot recover them for you. If you lose your seed phrase and your device, the keys are gone.

Persona sync (opt-in)

Personas — the friendly metadata around an identity (name, avatar, color, app preferences) — can optionally sync across your devices via an encrypted relay (khatru-uno). The encryption key is derived from your seed. The relay sees only ciphertext.

This is off by default. You turn it on per identity. Nothing about your personas leaves your device unless you explicitly enable sync.

Email aliases

If you create an alias address (e.g. you@nostr.uno), inbound mail is forwarded through Cloudflare Email Routing and Resend to a destination you specify. We retain forwarding metadata (sender, timestamp, size) for debugging but do not store the body of forwarded messages. Plain-text content is never persisted on our infrastructure.

Lightning wallet

Each identity can hold its own Lightning wallet. We do not custody funds. Wallets are non-custodial; you hold the keys, and you can export them at any time.

What we never have access to

• Private keys (nsec / seed phrase)
• Plaintext of encrypted persona sync data
• Plaintext bodies of forwarded alias emails (beyond the brief in-transit forwarding window)
• The contents of events signed for third-party apps via NIP-46
• Your contacts list, unless you opt into persona sync

What we do see

• Public-side metadata you publish to Nostr relays (by design — that's how Nostr works)
• Aggregate, non-identifying usage stats on the marketing site (page views, no fingerprinting)
• Forwarding metadata for alias emails (sender, time, size — never body)
• Support correspondence you choose to send us

Third parties

We use Cloudflare for hosting and email routing, Resend for transactional email delivery, and (if you opt in) Khatru for encrypted persona sync. None of these have access to your keys or unencrypted persona data.

Contact

Privacy questions: support@nostr.uno.