Device A holds your key
Private
—
Plaintext on this device. Nothing has left yet.
Your key — scan on Device B This QR is shown device-to-device. It never touches the cloud.
The same encrypted private card is sealed on Device A, relayed as ciphertext through the cloud, and decrypted on Device B — but only after the key crosses over by QR. The relay never holds the key. Ciphertext alone is useless.
Plaintext on this device. Nothing has left yet.
empty — nothing relayed yet
Nothing here yet. Pull the ciphertext the relay is holding.