Privacy Policy

Effective October 22, 2026 · This document is available in English.

In short: Hushkeeper encrypts your files on your device. We don't have accounts, we don't run servers that receive your files or keys, and we don't collect analytics, advertising identifiers or personal data.

1. Who we are

Hushkeeper ("the app", "we", "us") is an iOS and iPadOS app that stores photos, videos and documents in encrypted vaults. Contact details are at the end of this policy.

2. Data we collect

We do not collect, sell or share personal data. The app contains no third-party analytics, advertising or tracking SDKs and does not use your advertising identifier.

3. Data stored on your device

• Vault contents. Files, thumbnails, file names, folders and settings are encrypted with AES-256-GCM using a random key that only your pattern or recovery phrase can unlock. Your pattern itself is never stored.
• Device salt. A random value stored in the iOS Keychain, used to derive your pattern key. It never leaves the device.
• Usage counters. To apply the free plan's limits, the app stores the number of photos and videos per vault under a random label, without names or content.
• Language and display preferences.

4. iCloud backup and sync

If Encrypted backup is on (the default), the app uploads encrypted copies of your vault to the private CloudKit database in your iCloud account. These copies are encrypted before they leave your device; neither Apple nor we can read them. Deleted files remain in the backup for up to 30 days so that they can be restored, and then they are removed. You can turn backup off in the app's Settings. iCloud storage is provided by Apple under Apple's terms and privacy policy.

5. Shared vaults

When you share files, the app creates a separate encrypted copy and stores it in the app's public CloudKit database so that the recipient can access it from their own Apple ID. The copy is encrypted with a key derived from a 9-word phrase that only you and the people you send it to know. Without the phrase, the data can't be located or decrypted. Each time a shared vault is opened, an anonymous record containing only the share's random identifier is created to enforce the open limit. You can revoke a share at any time, which deletes the shared copy.

6. Purchases

Subscriptions and purchases are processed by Apple through the App Store. We don't receive your payment details. The app checks your purchase status with Apple's StoreKit.

7. Permissions

• Camera and microphone — only to take photos and record video directly into your vault.
• Photo Library — when you choose to import items, and, if you agree, to delete the originals after they are imported. The app never uploads your photo library.

8. Children

The app is not directed to children under 13, and we do not knowingly collect any data from children.

9. Your rights

Because we don't hold personal data about you, there is nothing for us to access, correct or delete. You can delete all app data by deleting the app and, if you used backup, by removing Hushkeeper's data in iOS Settings → your name → iCloud → Manage Account Storage.

10. Changes to this policy

If we change this policy, we'll update the date above and, for significant changes, mention it in the app's release notes.

11. Contact

Questions about privacy: [email protected]