Privacy Policy

Information we do not collect

• We do not collect, see, or store your photos, videos, or any vault content.
• We do not have user accounts, and we do not ask for your name, email, or phone number to use the app.
• We do not operate a server that receives your vault data.
• We do not use analytics, crash-reporting, or tracking SDKs.
• We do not sell or rent your personal information to anyone.
• We do not track you across other apps or websites.

Your content stays on your device (and is encrypted)

Everything you add to Privaro (photos, videos, thumbnails, albums, captions, tags, and file names) is encrypted on your device using industry-standard AES-256-GCM encryption. The encryption key is generated on your device and stored in the iOS Keychain; it is protected by your device passcode/biometrics and your Privaro passcode. Encrypted files are stored in the app’s private storage with full file protection and are excluded from unencrypted device backups.

Because encryption happens on your device and the key never leaves it, we have no ability to access, decrypt, or recover your vault content. If you forget your passcode and your recovery key, your data cannot be recovered by us or anyone else.

Optional features that involve data leaving your device

These features are off by default and only operate when you choose to use them:

• Encrypted iCloud Backup (optional, Pro). If you enable it, Privaro stores an encrypted copy of your vault in your own iCloud account. The data is encrypted on your device before upload; the key is wrapped using a key derived from your passcode (PBKDF2-HMAC-SHA256). We never receive your backup or your key. iCloud is operated by Apple and governed by Apple’s Privacy Policy.
• Sharing / Export. When you share or export an item (including encrypted .privaroshare files or “Save to Photos”), that content leaves the vault as you direct. Where it goes and how it’s protected is then governed by the destination you choose.
• Wi-Fi Transfer (optional). Lets you transfer files between your device and a browser on the same local network. This connection is local and is not encrypted in transit, so only use it on a network you trust. Files are encrypted as soon as they’re imported into the vault. No data is sent to us or over the internet during a transfer.

Device permissions and why we ask

Privaro requests these only when needed, and the data is used on your device for the stated purpose:

• Photos: to import the photos/videos you select into your vault, and to save items back out if you choose.
• Camera: to capture photos/videos directly into the vault, for the in-app camera, and, if you enable it, to capture a photo on a failed unlock attempt (“break-in” capture). Break-in photos are encrypted and stored only on your device; you can view and delete them at any time.
• Microphone: to record audio with videos you capture in the app.
• Face ID / Touch ID (biometrics): to unlock your vault. Biometric authentication is handled entirely by iOS; Privaro never receives or stores your biometric data.
• Location (optional, “Location-Based Lock”): if you enable it, your device’s location is checked on your device to decide whether to allow unlocking at places you’ve marked as trusted. Your location is not collected, logged, or transmitted to us.
• Local Network: for the optional Wi-Fi Transfer feature described above.

Purchases (Apple)

Privaro Pro is sold as a one-time purchase through Apple’s StoreKit / App Store. Apple processes the transaction and your payment; we do not receive your payment details. Purchase status is handled through your Apple Account. See Apple’s Privacy Policy.

Data retention and deletion

Your content stays on your device until you delete it. Deleting items moves them to “Recently Deleted,” and they are permanently removed after 30 days (or immediately if you choose). Deleting the app removes its app data; if you enabled iCloud Backup, you can remove that from within the app or via your iCloud storage settings. Because we don’t hold your data, there is nothing for us to delete on our side.

Children’s privacy

Privaro is not directed to children under 13 (or the minimum age required in your country) and we do not knowingly collect personal information from children.

Your rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have rights to access, correct, delete, or restrict the processing of your personal information. Because Privaro stores your content only on your device and we do not maintain personal data about you on our servers, you can exercise most of these rights directly by managing or deleting data in the app. For any questions or requests, contact us using the details below.

Security

We use on-device AES-256-GCM encryption, the iOS Keychain for key storage, PBKDF2 passcode hashing, and iOS file protection. No method of storage or transmission is 100% secure, and features like Wi-Fi Transfer that you choose to use have the limitations described above. You are responsible for keeping your passcode and recovery key safe.

Changes to this policy

We may update this Privacy Policy from time to time. We’ll revise the “Last updated” date above, and significant changes will be reflected in the app or on our website.

Contact us

If you have questions about this Privacy Policy or your privacy, contact us at:
[email protected]

This policy is also available in other languages. In case of any discrepancy, the English version is authoritative.