SekurMailBiometric Unlock — Notice & Consent
When you enable this:
- The biometric match happens entirely on your device, performed by your operating system's secure hardware (e.g., Apple Secure Enclave, Android Keystore, platform authenticator).
- SekurMail never receives, collects, stores, or has access to your fingerprint, face geometry, or any biometric identifier or template. The app on your device receives only your operating system's authentication result, which releases a locally stored secret to unlock your keys. Nothing biometric-related is ever transmitted to SekurMail's servers.
- We do not sell, lease, trade, or otherwise profit from biometric data — we never possess it.
1. What enabling biometric unlock does
It binds your app-unlock secret to your device's biometric/passkey gate so that a successful device biometric (or device passcode fallback) unlocks your SekurMail keys locally. It is a convenience layer over the same passphrase-based encryption — the passphrase mechanism remains underneath.
2. It is optional and revocable
Biometric unlock is off unless you turn it on. You can disable it at any time in the app's settings, which removes the binding on that device; you then unlock with your passphrase. Disabling on the device takes effect immediately for that device.
3. Consent
By enabling biometric unlock, you consent to your device operating system using your biometrics to gate access to SekurMail on that device. Because the biometric data is handled solely by your OS and never by SekurMail, this consent is directed at your device's biometric system, which is governed by your device maker's terms and privacy policy.
4. No biometric retention by us
Because we never collect biometric identifiers or templates, we have no biometric retention or destruction schedule — there is nothing for us to retain or destroy. Your OS manages its own biometric data per its policies.
5. Contact
Questions about biometric unlock: privacy@sekurmail.com.