Privacy Policy

Privacy Policy for VaultPix

The short version

What stays on your device

Everything. All of the following is stored locally in the app's private storage and is never transmitted anywhere:

• Photos and videos you import into the vault, and into the decoy vault
• Album names, cover photos and favourites
• Your PIN and decoy PIN — stored only as a salted hash, never in plain text
• Photos captured by Intruder Alerts, and the timestamps of failed unlock attempts
• Your app settings and security preferences

How your media is protected

• AES‑256‑GCM encryption. Every item you add to the vault is encrypted on your device using Apple's CryptoKit, with a random nonce per item.
• Keys in the iOS Keychain. The encryption key and your hashed PIN are stored in the Keychain, protected by iOS itself. They are not stored in the app's files and are not readable by other apps.
• No back door. We hold no key, no PIN and no copy of your vault. If you forget your PIN, we cannot recover it — and neither can anyone else.

What we do not do

• No analytics, crash reporting, or usage tracking of any kind
• No advertising and no advertising identifiers
• No third-party SDKs
• No accounts, email addresses, names or phone numbers
• No device identifiers or location data
• No cloud storage or sync service of our own — VaultPix has no server

Permissions the app asks for

• Photo Library — only so you can choose items to import into the vault, and export them back out.
• Camera — used solely by Intruder Alerts, to capture a photo after three failed PIN attempts. Those photos are stored in the vault on your device.
• Face ID / Touch ID — requested only if you enable biometric unlock. iOS performs the check; VaultPix only receives a yes or no, and never sees your biometric data.

Each permission is optional. Decline any of them and the app still works — you simply lose the feature that depends on it.

In-app purchases

VaultPix Pro is a one-time purchase handled entirely by Apple's App Store. Apple processes the payment and tells the app whether the purchase is active; we never see your payment details, and no purchase information is sent to us or to any third party. Apple's handling of that transaction is covered by Apple's Privacy Policy.

Deleting your data

Deleting VaultPix from your device removes the vault, its encrypted media, and the keys with it — permanently and immediately. There is nothing held elsewhere for us to delete, and no request you need to send us.

Because of this, export anything you cannot afford to lose before deleting the app or changing devices. VaultPix has no cloud backup of its own.

Children

VaultPix is rated 4+ and does not collect data from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date above. Our core commitment — collecting nothing and keeping your vault on your device — will not change.

Contact