HushKeep 
Privacy Policy — HushKeep
HushKeep is an encrypted vault for the photos, videos and files you keep on your iPhone and iPad. This policy is also linked from the App. It answers one question: what do we know about you? Almost nothing.
What we do not collect
- No account, no server. We run no server that receives your files or keys. No account needed.
- No analytics, no tracking. We collect no analytics and no personal data. The app contains no analytics or advertising SDK, and it does not track you across apps or sites.
- No crash SDK. The app contains no crash-reporting SDK of its own.
- Data Not Collected. The App Store privacy label for HushKeep is “Data Not Collected”.
The only data we ever see is a support email from you, and only if you write to us (see “What we do see: support emails”).
What the app accesses, and why
HushKeep requests a small number of iOS permissions, each used for exactly one thing:
- Camera — to take photos and videos that are saved only inside your vault, never in your camera roll.
- Microphone — to record sound with videos you take inside your vault.
- Photos (delete) — to delete photos from your library after you’ve moved them into your vault.
- Photos (add) — to save items you export from your vault to your photo library.
Picking items to import needs no permission: the system picker runs outside the app and hands over only the items you choose. HushKeep never asks for location access, so captures carry no location data.
Where your data lives
- On your device. Files are encrypted on your device with AES-256 before they’re saved or backed up. Each pattern opens its own vault. The app keeps no list of your vaults.
- In your own iCloud, if you turn backup on for a vault. Backups are encrypted before they reach iCloud. Apple stores data it can’t read. The backup lives in the private part of your iCloud account.
- Nowhere else. There is no HushKeep server, database or third-party service that holds your content, your keys or your metadata.
Purchases and subscriptions
Purchases of HushKeep Pro are processed entirely by Apple through the App Store. We never see your payment details and keep no record of your purchase history. Renewals, cancellations and refunds are handled in your Apple account. The app offers “Restore Purchases”, so a purchase follows you to a new device signed in to the same Apple ID.
Crash reports
The app contains no crash-reporting SDK. If your iOS is set to share crash logs or diagnostic data with Apple, those logs belong to your device and go to Apple; they reach us, if at all, only through that iOS opt-in, and only as crash logs — never as your content or your keys. The app itself sends us nothing.
What we do see: support emails
If you email us, we see your message and the address it came from. That is the only data we see, and only if you write. Support never asks for your patterns, your recovery phrases or your files, and you should never send them.
Children’s data
Because HushKeep collects no personal data at all, we do not knowingly collect any data from children, of any age. The app is not directed at children.
We can’t recover your vaults
Your vaults can only be decrypted with your pattern or recovery phrase. We hold neither. If you lose both, no one — including us — can open or restore your vaults, and that is by design. When an item is permanently deleted (after it leaves the 30-day Recently Deleted period), deleted files are erased and their keys destroyed.
Contact us
- Support email: [email protected]
- Website: https://hushkeep.com.au/
Changes to this policy
If we change this policy, we post the updated version on this page. This policy covers HushKeep for iOS and iPadOS.
08 §7 coverage
Every bullet of spec 08 §7 (Privacy), mapped to the section that covers it:
| 08 §7 bullet | Covered in |
|---|---|
| App Store privacy label: “Data Not Collected” | What we do not collect |
| What is stored, and that it’s on the device and in the user’s own iCloud, encrypted | Where your data lives |
| That we receive nothing | What we do not collect; Crash reports |
| How purchases are processed by Apple | Purchases and subscriptions |
| That crash reports arrive only via the user’s iOS opt-in | Crash reports |
| That the support email is the only data we see, and only if the user writes | What we do see: support emails |
| A contact address | Contact us |
| Support never asks for patterns, phrases or files; the canned response explains we can’t recover vaults | What we do see: support emails; We can’t recover your vaults (canned response: recovery-reply.md; support page: support.md) |