Photo Vault for Android privacy policy

Effective date: 24 October 2026. Publisher: Pixel Works Software S.R.L., trading as Pixel Works Software. Contact: office@pixelworkssoftware.com.

This policy covers Photo Vault for Android phones and tablets, package com.getlightproof.vault, version 1.0 and later.

The short version

Your photos, videos, files, names and encryption keys stay on your device unless you export them or save an encrypted backup to a destination you choose. Photo Vault has no account and shows no ads. Optional usage analytics is off by default.

What stays on your device

• Your vault items, encrypted with keys protected by your PIN or password and by Android Keystore.
• Information the app needs to work, including item sizes and dates, encrypted names, album structure and settings.
• While an import is in progress or awaits your review, the locations of the files being imported, which can include folder and file names. These locations are erased after you finish reviewing the import.
• Your backup history: when the last backup was made, its size and the folder or file you chose.
• A record of failed unlock attempts, shown after your next successful unlock.
• Whether Premium is active, as last confirmed by Google Play, so Premium can keep working briefly when Google Play is unavailable.

Photo Vault never sends vault content or encryption keys to Pixel Works Software.

Optional usage analytics

Usage analytics is off by default. If you choose to enable it, Google Analytics for Firebase processes limited app interactions, such as setup completion, the screen visited, operation outcomes, paywall and permission decisions, coarse item-count ranges and fixed error categories. It also processes app and device details, approximate geography inferred from the internet connection, a pseudonymous app-instance identifier and purchase events such as the product, plan, trial status and outcome. Analytics events never contain a photo, video or file, a file or album name, vault contents, a PIN, password, recovery key, payment details, email address or Google Account.

We use this information only to understand the user journey, improve reliability and diagnose purchase flows. Advertising identifiers, advertising features and personalised-ad signals are disabled. Photo Vault contains no ads and does not track you across apps or websites. Google processes this data as our service provider under Google's privacy policy and the Google Analytics for Firebase terms.

You can stop future collection at any time in Settings › Privacy › Share usage analytics. Turning it off resets Firebase Analytics data and the analytics installation identifier stored on your device. Turning it on again creates a new identifier. User-level and event-level analytics retention is set to two months; aggregated reports may remain longer. Because Photo Vault has no account and analytics is pseudonymous, we generally cannot connect an email request to an analytics installation. You can still contact us about your privacy rights at the address above.

Purchases

Google Play processes purchases. Photo Vault uses Google Play Billing to show prices, buy or restore Premium and check whether Premium is active. Google Play may offer monthly and annual subscriptions, including a seven-day trial for eligible annual subscribers, and a one-time Lifetime purchase. The app receives the state of your purchase from Google Play on your device. Pixel Works Software never sees your payment details or Google Account. Google's privacy policy and the Google Play Terms of Service apply. Manage or cancel a subscription in Google Play; uninstalling the app does not cancel it.

Backups, exports and sharing

Backups are created only when you ask, or on a schedule you set, and are saved to a location you choose. They are encrypted and can be opened only with your recovery key, which Pixel Works Software never receives. If you choose a cloud folder, that provider stores the encrypted file under its own terms. Exporting or sharing hands the selected item to the folder or app you choose and is subject to that destination's privacy practices.

Permissions

• Notifications: to show progress for long imports, exports, backups and restores. Notifications never show file names or previews.
• Biometrics: to unlock with a fingerprint or face if you enable it. Biometric data is handled by Android and is never available to the app.
• Foreground service: so a long task you started can keep running when you leave the app.
• Storage on Android 8 and 9: to save exported items into Pictures, Movies or Downloads. Photo Vault does not use this permission to read your gallery. Newer Android versions do not require it.

Photo Vault does not request camera, microphone, precise or device location, contacts or account access. Internet access is used for optional analytics and Google Play Billing; vault features work offline.

Email support

If you email us, we receive your email address and whatever you include. We use it only to answer you and can delete that correspondence on request.

Children

Photo Vault is intended for adults and is not directed to children under 13.

Your choices, changes and contact

Your vault remains under your control. You can delete items in Photo Vault, erase the vault from Settings, clear the app's storage or uninstall the app. You can turn analytics off at any time. For privacy questions, deletion requests concerning support correspondence or other rights, contact office@pixelworkssoftware.com or use our contact page.

If this policy changes, the new version will be published at this address with a new effective date.