
Privacy is architectural, not a policy. TrustLayer literally cannot leak data it never held.
Public proofs → Base blockchain. Private vault (message keys, backup) → your device, AES-256 encrypted with a wallet-derived key. IPFS is used only for content you explicitly publish.