Now you can take Cloaked to work with
Now you can take Cloaked to work with
LAST UPDATED: September 19, 2026
Promises aren’t enough.
We built Cloaked because it became impossible for people to control the collection and sharing of their own data, and with the constant stream of new technology and data breaches, we knew that there needed to be a better way for people to live in our technology enabled world and still maintain their privacy. When we couldn't find the solution that we knew was needed, we built it. Cloaked deletes our customers' data from the brokers holding it, then gives customers the tools to cloak what they share going forward, so what flows back to the brokers is a cloaked identifier, not their real information.
As a privacy first company, we also know how important it is to give our customers and all visitors to our website information about how we collect and use data. This privacy policy applies to our customers and all visitors of our Website.
This Privacy Policy (or “Policy”) tells you how Cloaked, Inc. (“Cloaked,” “we,” “us,” or “our”) collects, uses, shares, secures, and eventually deletes, information collected from and about visitors to our Website, and from our Customers. We respect your privacy and are committed to protecting the Personal Information that you may share with us.
If you are applying for a job with us, you can find our privacy policy for our job applicants here.
This Policy covers both our online and offline data collection activities, including information that we collect through our Website and Application, as well as our offline in-person events and events.
By continuing to visit and use our Website, you are agreeing to the terms of this Policy. If you do not agree, then please exit this Website and close your browser.
Additionally, if you participate in one of our in-person events or programs, in which you share your Personal Information with us directly offline, you are consenting to the terms of this Policy as well. If you do not consent to share your Personal Information with us via our in-person events and programs, please do not participate in the same and do not share any of your Personal Information with us.
Cloaking means swapping a piece of your real information for a working substitute — an email address, a phone number, a payment card that functions normally – but doesn't lead back to you. That substitute is a cloaked identifier: you give it out, your real information stays with you, and you (not the data brokers) stay in control of both types of information. In this policy, "cloak," "cloaked," and "cloaking" all carry that meaning.
No. We have never and will never sell your personal information. We do not share it for advertising. We do not use it for targeted advertising. We do not sell or share sensitive information.
As used within and throughout this Policy, the following terms have the following meanings:
“Application” means the Cloaked mobile and desktop apps.
“Cloaked Identifier” means a working substitute information that we create for you to use to Cloak a piece of your real information — an email address, a phone number, a payment card.
“Consumer Health Data” means information that reveals your past, present, or future physical or mental health. TLDR: We do not collect it.
“Personal information” means information that identifies you or could reasonably be linked to you. Some laws call this personal data; we mean the same thing. It does not include information we have aggregated or anonymized so it can no longer point back to you.
“Sensitive Information” means the categories in Does Cloaked receive my Sensitive Information? Some laws call this sensitive personal information or sensitive data; we mean the same thing.
“Service(s)” means all the features and functions provided via a customer account with Cloaked via the Application.
“Website” means https://gammacloakedsecurity.com.
If you are just visiting our Website and do not have an account with us, then we don't collect any information from you.
If you are one of our customers, then depending on how you set up your account, we may receive no personal information from you if you choose to not share that information with us (this includes payment information which if you decide to not share your personal information with us, then we receive the payment information on a reduced knowledge basis that does not share your name or full address).
If you choose to share your personal information, then we may receive the categories of information listed below in order to provide our services to you. What we collect depends on your use of the Service. Regardless of what you share with us, we do not build profiles of your habits, interests, or character.
Further, if you choose to share your personal information with us, rest assured that it is encrypted at every stage, including in transit between your device and our systems, and at rest on our servers. If you create your own data vault then it is encrypted with a key derived from your password — a key we do not hold — so we cannot read what's inside it. A data vault is included with your subscription and enables our customers to maintain their personal information in a secure manner.
Generally for most customers that share their personal information with us, we receive:
Depending on your use of our services, we may also receive information as needed for:
When you use Aliases, then we collect the aliased and real addresses and numbers. The information that you get and send through your aliases including text messages and email content are fully encrypted in both rest and in transit. We deliver your messages. We cannot and do not read them.
When you use our Data Removal services, then we collect the information needed to find and delete your data with data brokers which is generally your name, current and past addresses, date of birth, and known emails and numbers.
When you use Call Guard, then we collect and process the pre-call audio and what the caller says, handled in the moment to screen, label, or block the call, plus the calling number. We do not make a voiceprint or any other biometric ID.
When you use our Dark Web and SSN Monitoring services, then we collect and process your Social Security number and other identification information such as your date of birth, and use that to scan for exposures and warn you of any leakage.
When you use our Inbox Cleaner services, then we access the email inbox that you connect us to, in order to sort and remove mail as you direct. We do not collect information from your emails (unless you direct us to), just process them to organize as you instruct.
When you use Cloaked VPN, then we do not collect any data including no browsing history. Cloaked VPN leverages technical support from PureVPN and Windscribe to enable our VPN, and thus, depending on which one is being used at the time, you may be covered under their privacy policies. Windscribe’s privacy policy may be found here and PureVPN’s privacy policy may be found here.
If you apply to use Cloaked Pay, then our third party service provider, Sardine, will collect your Date of birth, financial account data, and other know-your-customer information federal law requires to process your application. You can find Sardine’s privacy policy here.
If you are approved to use Cloaked Pay and use it, then we rely on Lithic to collect and process your financial account data, your purchase and use history, and your balances and other financial information in order to service your account. You can find Lithic’s privacy policy here.
If you used our free Phone Scan to see how your information may be compromised, then we only collect your phone number to run a one-time scan that checks data-broker and people-search sites for records tied to your number — things like your name, address, social security number, email and other information that these companies collect and sell. We share those findings with you and do not retain a copy of the same. As per our terms, we do retain your phone number but only long enough to send you a few reminders about your scan, and after that we delete your number too. We never sell your number or use it for advertising unless you otherwise opt in to us sending you advertising messages.
If you ask for or need to receive a one-time code from us, then we text you a one-time code to the phone number you provide to us or that we have on file for you to authenticate you are you. If you received a code related to our phone scan that it is only kept for as long as needed as noted above, and if you have shared your phone number with us, it stays secure in your account. We never share it with anyone for marketing or promotional purposes.
If you sign up for and join the Cloaked’s Early Access Pool, then when you apply, we use what you tell us to consider your application and to match it to your existing Cloaked account. If you're selected, we use it to contact you about early access to new features, coordinate which new features you can gain access to, and collect your feedback and information about how you use them. Only the Cloaked team members who run the program can see your responses. If we don't select you, we delete your application after 90 days.
Some features may need additional information. For example, if you test new voice or phone features, we may ask for your mobile carrier information to diagnose problems and we use it only for that, and we delete it when the test ends.
New features reach you through Apple TestFlight or Google Firebase App Tester, not through us. Apple and Google collect their own information about installs, crashes, and usage under their own policies, and Apple shares the email address you use for TestFlight with us. We don't control what they collect and you can find their privacy policies here: Apple Testflight and Google Play.
Please remember that new features can be unstable and can cause errors, interruptions, or data loss. We recommend that all users back up their data regularly regardless, but you should also back up anything important before you join the Pool. Everything else in this policy applies to the Pool participation exactly as it does to the rest of the Service, and you can leave the Pool any time.
If you choose to start a virtual chat on our website or in the Application, you are talking to Kit. Kit is an AI assistant, not a person. We say so at the start of every conversation, and we will confirm it any time you ask.
Kit answers questions about Cloaked, can help with opening a new account or manage your account, and handles billing requests including cancellations and refunds. You can ask for a human at any point. Our human agents are available Monday through Friday from 9 am until 8 pm EST and from 9 am to 1 pm on Saturday and Sunday. Outside of those hours Kit will take your request and a person will follow up within 2 business days.
We only use chat transcripts to answer your question, improve support, and keep the Service secure. We do not use them to train AI models. Regardless, please don't type your sensitive personal information into the chat – including, Social Security number, passwords, or card numbers — we will never ask for them there, and Kit doesn't need them to help you.
Yes. The assistant lives in the Application and is AI, not a person. It is labeled as AI, we obtain your consent before it can be turned on, and it will confirm that it is AI if you ask. The Assistant can answer questions, walk you through features, and help you set things up. It sees your account and what you type. It cannot see inside your vault, read your messages, or listen to your calls. You may directly share items with it if you choose and can audit and remove anything the assistant has obtained.
The Assistant keeps notes about what you have asked and set up, so you don't have to explain yourself twice. You can read them, change them, and delete them any time — and you can leave your own notes for the assistant to remember. Delete a note and it is gone. Turn the assistant off or close your account and every note goes with it. Before the assistant does anything on your behalf, it tells you and waits for a yes. It does not spend your money, close accounts, delete your data, or make decisions that carry legal weight.
Remember it's best to not type your Social Security number, passwords, or card numbers into the assistant — we will never ask for them there.
No. We use functional cookies and session replay tools only. These are the ones the Service and our Website need to work.
We do not use advertising cookies, advertising pixels, or tracking cookies. We do not let anyone else place non-functional cookies on our site or in the Application.
Because these cookies and the session replay tools are strictly necessary to deliver the Service, we do not ask for consent to set them and turning them off would break the Service and the Website.
If you share your sensitive information with us then yes, but only as needed. Thus, depending on what services you use as noted above, you may want to provide us with the following types of sensitive information such as:
Your Social Security number, driver’s license, state ID, or passport number;
Your login credentials, including the ones in your vault;
Your financial account or card numbers; and
The contents of your mail, email, and texts, and precise location if you turn on a feature that needs it.
We use it only to run the feature you turned on, to stop fraud and security problems, to keep the Service working, and to follow the law. We never use sensitive information to work out things about you, to build a profile, or for advertising. We never sell or share it.
As noted above, we also fully encrypt this data at every stage, including in transit between your device and our systems, and at rest on our servers. If you create your own data vault then it is encrypted with a key derived from your password — a key we do not hold — so we cannot read what's inside it.
Yes. If you choose to share your personal information with us, it is encrypted at every stage, including in transit between your device and our systems, and at rest on our servers. If you create your own data vault then it is encrypted with a key derived from your password — a key we do not hold — so we cannot read what's inside it. A data vault is included with your subscription and enables our customers to maintain their personal information in a secure manner.
Cloaked generally receives information in three ways:
Directly from you:
When you choose to share your personal information with us, set up an account, pick a plan, turn on a feature, and/or contact us.
Automatically
Through server logs, and through functional cookies and session replay tools on the Website, and functional tools on the Application.
From third party payment processors and fraud screening providers
If you link a bank account, Plaid, PayPal, or Stripe may collect your bank login directly from you — their policies cover that, and we receive only the account data. You can find Plaids privacy policy here, PayPal’s privacy policy here, and Stripe’s privacy policy here.
From your employer if you received Cloaked via your employer
If you received Cloaked from your employer, then we receive limited data from your employer – such as your name, phone number and email address – in order to provide you with a Cloaked account.
No. Some organizations buy Cloaked for their people. If that's you, your employer sees a limited set of information about your account — and nothing inside it.
We give your employer this so it can manage licenses and further secure its cybersecurity risk. We do not give them a window into your account, and we will not build one.
Your employer only shares a limited set of information with us at the beginning of the relationship, and only does so under an agreement that requires we maintain it securely. For that information, your employer is in charge and its own policies apply. For everything inside your account, we answer to you, and you have your privacy rights as noted below.
If you leave the organization, or your employer stops paying for your license, we will tell you before your account changes and you will have the right to continue your account by taking over the payments. Regardless, your employer cannot delete your vault, and it cannot take your aliases.
If your employer asks us for information about you beyond what is listed above, we say no unless you give us consent to share it or because a valid legal process requires it.
We only receive information as needed to provide you with our services. Generally, those reasons include:
To run the Service and the features you turn on;
To contact you as needed to support the Service and as requested by you;
To take payment for our services, and handle your transactions if using Cloaked Pay;
To set up your account and check you are who you say you are;
To stop fraud and abuse;
To answer your support requests;
To fix bugs and improve the Service;
To keep the Service secure;
To tell you about changes to our terms or policies;
To do the deletions, opt-outs, and monitoring you ask for; and
To follow the law and defend legal claims.
What we never receive your information to use it for:
Advertising of any kind.
Training or improving AI frontier models.
Decisions that carry legal weight — credit, housing, jobs, school, insurance, or health care.
Anything the Fair Credit Reporting Act covers. We are not a credit bureau, our results are not a consumer report, and you agree not to use the Service for FCRA purposes.
Yes. We only share your information as needed and generally with:
Companies working for us
We share information with third party vendors that are performing a service for us to help us provide our services to you. As noted below, these third parties only handle your information on our instructions, and only to do the job we hired them for:
Regulators and Law Enforcement
We respond to valid legal processes (such as a subpoena) when required by law, and we share information as needed to defend against legal claims, and/or to otherwise protect people’s safety. If we are allowed to tell you someone demanded your information, we will.
Our new owner If Cloaked is sold or in preparation for a sale, merger, or acquisition
We may need to share certain information as needed for a sale, merger or acquisition. To the extent needed, such sharing would only occur under terms that maintain the obligations of this Policy.
Cloaked only maintains your information for as long as necessary. Thus, if you are a customer, we will only maintain your information for as long as you have an account with us, and only for the services you turn on with us, or as otherwise required for a legal and/or regulatory purpose.
No. The Service is not permitted, designed for, or directed to children under the age of 16. We do not collect information from any person we actually know is under the age of 16. The only time we would receive the information of a child under 16 is if that child is over 13 and their parents created an account for them. If you believe your child has provided us with personal information or you created an account for your child over 13 and now no longer want to consent to us providing that account to your child, then please alert us at [email protected]. If we learn that we have collected personal information from a minor, we will promptly take steps to delete such information.
Yes. We maintain a written information security program that employs reasonable security tools and controls to protect data that we collect, process, share, and maintain. Further, as noted above, your data is encrypted at every stage. Unfortunately, nobody can rule out a security incident. If we suffer one and it impacts your information, we will notify you and address the incident in compliance with all applicable legal requirements.
Most companies give you privacy rights only if your state passed a law. We do not think that is right. Wherever you live, you can:
Find out whether we hold information about you, and get a copy if you want;
Fix mistakes contained in the data that we have about you;
Have your information deleted from our systems if we have it;
Opt out of sale, sharing, targeted advertising, and profiling — we do none of these, so there is nothing to opt out of, but you do have the right to ask anyway;
Tell us to limit how we use your sensitive information;
Take back any consent you gave us;
Get a list of who we shared your information with; and
Do any of this without being charged more, given less, or treated differently.
You can also unsubscribe from marketing email any time. You cannot unsubscribe from service messages — receipts, security alerts, and policy changes — because you need them.
You can exercise your rights by emailing us at [email protected], or by calling us at +1 (888) 857 5490. We will check who you are using information already tied to your account.
In general, you will receive a response from us within 45 days (or shorter based on legal requirements), and sometimes if needed, within a longer time period but we will give you notice of that and comply with all related legal requirements to keep you updated during the process as needed.
If we say no to one of your requests, we will explain why and include instructions on how to appeal. Namely, to generally appeal a denial, you can email [email protected] with “Appeal” in the subject line and tell us what we got wrong. We answer in writing within 45 days. If we deny the appeal, you can complain to the attorney general in your state.
Someone else can exercise your rights on your behalf with your permission. To protect your privacy we verify all third parties that are claiming to be acting on your behalf actually are by requiring written permission signed by you, and/or checking your identity directly. Someone with a valid power of attorney does not need those extra steps.
If you are a resident of one of the States listed below, then you may also have the additional rights listed and/or needed to receive the additional information provided:
California
California residents have the rights listed above in the what are my rights section, and also needs to know that:
What we collect and where it comes from, why we collect information, and who receives it is all listed in the sections above.
We have not sold or shared personal information in the last 12 months. There is no “Do Not Sell or Share” link because there is no selling or sharing to stop.
We use sensitive information only for the purposes as the law allows and only as consented to by our customers.
We do not sell information about anyone under 16, so we never need your opt-in. We do allow parents to set up an account for their children aged 13-16, but only with the parents consent. To that extent we do share the information of children aged 13-16, but only as needed to provide the services to the 13-16 year old and with consent of the parent that provided the account to them.
You can exercise your rights by visiting cloaked.com/privacy-request, emailing us at [email protected], or calling us at +1 (888) 857 5490. We will check who you are using information already tied to your account. You do not need an account to ask.
We answer within 45 days. If your request is complicated, we may take another 45, and we will tell you why inside the first 45. It is free.
If we say no, we will tell you why and how to appeal. Email [email protected] with “Appeal” in the subject line and tell us what we got wrong. We answer in writing within 45 days. If we deny the appeal, you can complain to the California Privacy Protection Agency or the California Attorney General.
Virginia, Connecticut, and Colorado
Virginia, Connecticut, and Colorado residents have the rights listed above in the what are my rights section, and also needs to know that:
What we collect and where it comes from, why we collect information, and who receives it is all listed in the sections above. We do not sell, target advertising, or profile you. We honor opt-out signals, ask your permission before handling sensitive information, and we assess any processing that carries a heightened risk of harm.
You can exercise your rights by visiting cloaked.com/privacy-request, emailing us at [email protected], or calling us at +1 (888) 857 5490. We will check who you are using information already tied to your account. You do not need an account to ask.
We answer within 45 days. If your request is complicated, we may take another 45, and we will tell you why inside the first 45. It is free.
If we say no, we will tell you why and how to appeal. Email [email protected] with “Appeal” in the subject line and tell us what we got wrong. We answer in writing within 45 days. If we deny the appeal, you can complain to the Virginia, Connecticut, or Colorado Attorney General.
Texas
Texas residents have the rights listed above in the what are my rights section, and also need to know that:
We collect only what is adequate, relevant, and reasonably necessary to run the Service. We do not sell sensitive or biometric data.
You can exercise your rights by visiting cloaked.com/privacy-request, emailing us at [email protected], or calling us at +1 (888) 857 5490. We will check who you are using information already tied to your account. You do not need an account to ask.
We answer within 45 days. If your request is complicated, we may take another 45, and we will tell you why inside the first 45. It is free.
If we say no, we will tell you why and how to appeal. Email [email protected] with “Appeal” in the subject line and tell us what we got wrong. We answer in writing within 45 days. If we deny the appeal, you can complain to the Texas Attorney General, at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.
Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, and Utah
If you are a resident of one of these States, then have the rights listed above, and also need to know that: We honor opt-out signals, ask permission before handling sensitive information, and assess processing that carries a heightened risk of harm. A few additions:
Delaware, Maryland, Minnesota, and Oregon. You can ask for a list of the specific companies we gave your information to. If we do not hold that list in a form specific to you, we will send the list for all customers.
Minnesota. You can question a profiling result and correct what sits behind it.
Maryland. We collect only what running the Service reasonably requires, we never sell sensitive information, and we never sell or target ads at anyone under 18.
Rhode Island. We have designated a controller at [email protected]. We do not sell, so there is no buyer list.
Nevada
Nevada law lets residents tell a website not to sell their information. We do not sell it, to anyone, ever. If you want to file the request anyway, email [email protected] and we will confirm.
Health Data
We do not collect consumer health data, as Washington’s My Health My Data Act, Nevada’s health data law, and the Connecticut and Maryland health provisions define it. We never use anything you give us to guess at your physical or mental health. We collect no biometric data. We never sell health data and we do not geofence health facilities.
If you think we hold health data about you, email [email protected]. We will tell you what we have and who received it, delete it, or withdraw consent — within 45 days, with the appeal rights listed above.
California law lets you ask what information a company gave to others for their own direct marketing, and who they were. We give out nothing for that purpose. If you want that in writing, email [email protected] and ask for your California Shine the Light Notice. We reply within 30 days.
Some browsers send an opt-out signal, such as Global Privacy Control, telling sites you do not want your information sold, shared, or used for targeted advertising. We treat that as a real request. Since we do none of those things, it changes nothing — but we honor it, we will not ask you to reconsider, and we will never treat you differently for sending it.
Do Not Track is an older browser setting with no agreed standard. It is not a recognized opt-out signal, and we take no separate action on it.
We do not let outside companies track you across the internet through our site or Application. There is no ad network on cloaked.com.
We sometimes link to sites we do not run. What you share there is between you and them. A link is not an endorsement, and we are not responsible for how they handle your information.
We do not currently offer our services for residents of the European Union (“EU”) or the United Kingdom (“UK”). We will still respect your rights if you are a resident of the EU or UK and believe that we have your information. Thus, please contact us at [email protected] to exercise the same.
If you are a resident of Canada, then unless your province says otherwise, we handle your information with your permission, for the purposes in this policy. You do not have to give it to us, though some services will not work without it.
You can ask what we hold, how it has been used, and who received it. If you show us something is wrong, we fix it. You can withdraw permission any time at [email protected], though some services will stop — that does not undo what came before or force us to delete what we must keep. Ask and we will send our complaint procedure. You can complain to a data protection authority where you live or work.
Your information may be stored and processed in the United States.
Québec
You can also get your information in a machine-readable format and have us send it elsewhere, and in some cases require us to stop circulating it or to de-index a link to it. We tell you before using your information for a new purpose, and we run privacy impact assessments as Québec law requires.
These rights have limits — for example where answering would expose someone else’s information, or where the law requires us to keep something.
Cloaked Pay is a financial product, offered with our issuing bank, and different federal rules cover it. The information it uses is governed by the Gramm-Leach-Bliley Act and described in the separate Cloaked Pay privacy notice you receive when you open the account and every year after, available at cloaked.com/legal. Where that Act applies, it and that notice govern, and the state law sections of this policy do not. Everything else here still covers the rest of your relationship with us.
Marketing email. Unsubscribe link, your account settings, or [email protected].
Texts. Reply STOP.
Automated features. Switch them off in the Application.
Sale and advertising. Nothing to stop — we do not do it.
Even if you opt out of marketing, you will still get receipts, security alerts, and policy changes.
If we change this policy we will update the date at the top. For anything significant we will email you, post it prominently, or tell you another way, and we will ask your permission where the law requires. We will not start using information we already hold in a materially different way without telling you first. Changes take effect when published. We keep dated copies of old versions, and you can ask for one.
Privacy questions and requests: [email protected]
Data Protection Officer: [email protected]
Mail: Cloaked, Inc., Attn: Privacy, 1075 Westford Street, Suite 305, Lowell, Massachusetts 01851
Phone: +1 (888) 857 5490
Need this in another format or language? Ask and we will send it.
