Privacy Policy

This Privacy Policy describes how Obscura Photo Vault ("App") handles your information on iPhone, iPad and Android. We are committed to protecting your privacy.

Data Collection

Obscura Photo Vault does not collect, store, or transmit any personal data. We do not have servers, accounts, or analytics. Your photos and vault data exist only on your device.

Local Storage

All data is stored locally in your device's app sandbox. This includes:

• Photos and videos you import into vaults
• Vault metadata (folder names, organization)
• App preferences and settings

Photos are encrypted using AES-256-GCM before being saved to disk. Your data never leaves your device except through the backup and transfer mechanisms described below, which your device settings control, or when you explicitly use the App's export feature.

• iPhone and iPad: the standard iOS backup (iCloud Backup), if you have it turned on. What is backed up is already encrypted.
• Android: nothing from the App is included in Google backup. When you set up a new phone from an old one with a cable or the phone-to-phone transfer, only the App's encrypted vault folder is carried over.

No Third-Party Sharing

Since we don't collect any data, we have nothing to share with third parties. Your photos are yours alone. There are no analytics frameworks, advertising SDKs, or tracking technologies in Obscura Photo Vault.

Biometric Data

If you enable Face ID or Touch ID on iPhone, your biometric data is handled entirely by Apple's Secure Enclave. If you enable fingerprint or face unlock on Android, it is handled entirely by the system's biometric service and the phone's secure hardware. Obscura Photo Vault never accesses or stores your biometric information directly. The App only receives a success or failure result from the system.

Device Key on Android

So that a new Android phone, set up from your old one, opens your vaults the same way, the App stores one random value (a device key) with Google's Block Store service on the phone. It is not your password and not the key to any of your files, and it is not linked to you. Android and Google Play services move it; the App has no internet access and sends nothing to us. When the phone has a screen lock and Google backup is on, the value is end-to-end encrypted, so Google cannot read it. Otherwise it stays on the phone and moves only in a direct phone-to-phone transfer.

Purchases

Obscura Pro purchases are handled by the Apple App Store or Google Play. They process your payment and tell the App whether Pro is active. We do not receive your name, payment details or purchase history.

Encryption

Obscura Photo Vault uses industry-standard encryption to protect your data:

• AES-256 encryption for all photos, videos, and databases
• PBKDF2 key derivation with 600,000 iterations for vault passwords
• All encryption and decryption happens entirely on your device

We have no ability to decrypt your data. If you forget your password, your data cannot be recovered. This is an intentional security feature.

Device Permissions

The App may request the following device permissions:

• Camera: Used to capture photos and videos directly into your encrypted vault. Captured media is encrypted in memory before any disk write.
• Microphone (Android): Used to record the sound of a video you film with the App's camera. It is asked for only when you open the camera, and the camera works without it.
• Photo Library (iPhone and iPad): Used to import photos and videos from your device. Imported media is encrypted immediately. On Android, the system photo picker is used and the App needs no permission to your photos.
• Notifications (Android): Used to show that a long import or export is still running. The notification says nothing about your photos.

No Analytics or Tracking

Obscura Photo Vault does not use any analytics frameworks, advertising SDKs, or tracking technologies. We do not collect usage data, crash reports, or behavioral information.

Data Deletion

Since all data is stored locally on your device, you can delete all App data at any time by:

• Deleting individual photos or vaults within the App
• Deleting the App from your device
• Using iOS Settings, or on Android Settings, Apps, Obscura, Storage, to clear the App's data

Children's Privacy

The App does not knowingly collect personal information from children. Since Obscura Photo Vault does not collect any data from any user, this applies universally.

Security

Your data is protected by multiple layers of encryption and your device's built-in security features. No security software is perfect. While we implement industry-standard encryption and security practices, we cannot guarantee absolute protection against all threats. You use Obscura Photo Vault at your own risk.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date. Continued use of the App constitutes acceptance of the updated policy.

Governing Law

This policy is governed by the laws of the Province of Alberta, Canada, without regard to conflict of law principles.

Contact

If you have questions about this Privacy Policy, please contact us at support@orlio.io.