Privacy Policy
Last updated: October 25, 2026
Blank is a browser for iPhone, iPad, and Mac made by SELCOR (“we”). This policy describes the data Blank keeps on your device and the small amount of data our servers handle to run your subscription, email addresses, private network, backups, cloud vault, and Blank AI.
No account
Blank never asks for your name, email address, or phone number. When you first open Blank, it creates a random account number and a secret on your device. Our servers store the account number, a one-way hash of the secret, and the time it was created.
On your device
Your tabs, history, bookmarks, passwords, vault, mail, and Blank AI chats are stored on your device and encrypted with keys kept in its Keychain, unless you turn on Cloud Vault for a space. They are excluded from iCloud and device backups unless, from version 1.1.9, you turn on Include in iPhone Backup for a space. Then your iCloud Backup, or an encrypted backup on a computer, holds that space’s encrypted data and its key, so a device restored from that backup can open the space with its passcode. Apple or your computer keeps that backup; it never reaches our servers. We cannot see your data.
Subscriptions
Apple handles payment. When you subscribe, the App Store tells us the transaction number, the plan, when it ends, and whether it is a test purchase. We never receive your name, Apple Account, or payment details.
Email addresses
- For each address you create, we store the address, whether it is on, and when you made it. The site name you give it stays on your device.
- Mail to your addresses is encrypted the moment it arrives, with a key that only your device holds. We keep the encrypted message, its size, and its arrival time until your device downloads it, then delete it.
- Mail to an address that is off or does not exist is refused.
Private network
With Blank Pro, pages you open in Blank connect through our servers in New York and San Francisco, run on DigitalOcean. Those servers pass traffic to the sites you visit and keep no record of which sites you visit, your IP address, or when you connect; they count only totals such as open connections. Your network pass identifies your account only by a one-way hash.
Backups
Backup is off until you turn it on. Before anything leaves your device, Blank encrypts it with a key made from 12 recovery words that only you have. We store the encrypted files until you delete the backup, and we cannot read them or recover your words.
Cloud vault
Cloud Vault is off until you turn it on for a space, and it needs Blank Pro. Before a photo, video, or file leaves your device, Blank encrypts it with a key kept on your device and in your encrypted backup. We store the encrypted files, their sizes, and when they were uploaded, up to 100 GB for each Blank Pro account, and we cannot open them. When you open an item, Blank downloads and decrypts it in memory. Turn Cloud Vault off and Blank downloads everything to your device and deletes it from our servers.
We respond to valid legal requests for a specific account. Such a request can reach only the encrypted files and their sizes and dates. We delete an account's stored files when a court orders it.
Blank AI
Blank AI’s language model runs on your device, which downloads it from our servers. Your chats are stored on your device, encrypted like the rest of your data, and are included in your backup if you turn backup on.
- Before Blank AI answers, it sends your latest message and up to five earlier messages from the chat to our API. The API asks an AI classifier on Cloudflare Workers AI whether the message breaks our content rules and returns the decision. We do not store or log these messages, and Cloudflare does not store them or use them to train models.
- When your device is offline, devices that run the larger Blank AI model check the message on the device instead. Other devices wait until they are online.
- Web search is off until you turn it on. From version 1.1.4, when it is on and Blank AI decides to search, your device searches DuckDuckGo, or Startpage if DuckDuckGo gives no results, in a hidden browser window with no cookies or sign-ins. Blank AI can then open one of the result pages to read more of it. These requests go through the private network when you have it on, so the search engine and the website see the private network's address instead of yours. They receive the search words and handle them under their own privacy policies. Our servers do not see these searches.
- If neither search engine gives results, and in versions before 1.1.4, Blank sends only the search words to our API, which passes them to Exa, a search provider, through Cloudflare. We do not store or log the search words. Exa never receives your account number or IP address. To enforce a daily limit on these searches, we count them for each account number and delete the counts after two days.
Usage counts
To learn how Blank is used, our servers count, for each account number and day, how many times you open Blank, how many messages you send to Blank AI, how many items you save to the vault, and the largest number of items in the vault of a space you open. They also record when each account first downloads a Blank AI model. These are numbers only. We never record what you browse, save, or write, and we never store your Blank AI messages. We keep the counts with your account number until you ask us to delete it.
Our servers
Our API runs on Cloudflare. Blank reaches it through the private network servers, so the API does not see your IP address. We do not use third-party analytics or tracking tools, and we do not sell or share data.
Ads
If you installed Blank by tapping an Apple Search Ads ad, Blank asks Apple which campaign and keyword the ad belonged to and keeps the answer on your device. Our server adds one to an anonymous count for that keyword, and again if you start a trial or subscribe. These counts carry no account number, device information, or anything else about you.
Deleting your data
Delete an address, a vault item, a space, or your backup inside Blank and we delete it from our servers. Deleting Blank from your device deletes everything stored on it. To have us delete your account number, subscription records, and usage counts, write to support@blankbrowser.app.
Children
Blank is not meant for children under 13.
Changes
We will post changes to this policy on this page and update the date above.