Privacy Policy

Draft — pending legal review. This policy describes our current practices accurately, but its wording has not yet been reviewed by a lawyer and may change before launch.

Effective date: 21 October 2026

This Privacy Policy explains what information Velcrypt (“we”, “us”) handles when you use the Velcrypt iPhone app and the velcrypt.app website. The short version: the app is designed so that we never receive your content, and we collect as little as possible everywhere else.

The Velcrypt app

No personal data collected

The Velcrypt app does not collect personal data. There is no account, no sign-up, no email address and no login. We do not know who uses the app.

Vault content stays on your device

Photos, videos and documents you add to Velcrypt are encrypted on your iPhone and stored there. They are never uploaded to us or to any server we operate, and we have no way to view, decrypt or recover them. In the current version, vault data is also excluded from iCloud and computer backups. How the encryption works is described on the security model page.

No analytics on content, no ads

The app contains no advertising and collects no analytics on your vault content. We do not sell, rent or share personal data, because we don’t collect it.

Purchases

Any purchase, such as the optional Premium upgrade, is processed by Apple through the App Store. Apple handles your payment; we do not receive your name, card number or billing address. The App Store confirms the purchase to the app on your device so it can unlock the relevant features. Apple’s own handling of your data is described at apple.com/privacy.

Information Apple may share with us

Apple provides app developers with aggregated App Store statistics, such as download and sales numbers, which do not identify you. In addition, if you have chosen to share analytics with app developers in iOS settings, Apple may share crash and diagnostic data with us. We use this only to find and fix bugs. You can change this choice at any time in your iPhone’s privacy settings.

The Velcrypt website

No cookies or tracking

The website does not set cookies and does not run analytics, advertising or tracking scripts at this time. If we ever decide to add any, we will update this policy before doing so.

Hosting

The website is hosted by Cloudflare. Like any web host, Cloudflare processes standard request data — such as your IP address, browser type and the pages requested — to deliver the site and protect it against abuse. We do not use this data to identify or profile visitors.

Tools on the website

Interactive tools on the site, such as the photo metadata remover and the pattern strength checker, run entirely in your browser. Files and patterns you use with them are not uploaded or stored.

Emails you send us

If you email us — for example at [email protected] — we receive your email address and whatever you include in the message. We use it only to reply and to help you, and we keep it only as long as needed for that purpose. Please never send us your vault pattern or private content; we don’t need it. See support.

Children

Velcrypt is not directed at children, and we do not knowingly collect personal data from anyone, including children. Because the app collects no personal data, there is no child data to handle. If you believe a child has sent us personal information by email, contact us and we will delete it.

Your rights

Depending on where you live, laws such as the EU and UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) may give you rights to access, correct, delete or restrict the use of your personal data, to object to processing, and to receive a copy of your data. You also have the right to complain to your local data protection authority.

In practice, the only personal data we may hold about you is the content of emails you have sent us, and any diagnostic data Apple shares if you opted in. To exercise any of your rights, write to [email protected]. We do not sell personal data and do not use it for targeted advertising.

Security

We protect the limited information we hold with reasonable technical and organisational measures. Your vault content is protected by on-device encryption that we cannot bypass.

Changes to this policy

If our practices change, we will update this page and change the effective date at the top. Significant changes, such as adding analytics to the website, will be made here before they take effect.

Contact

Questions about this policy or your data: [email protected]. You can also read our Terms of Use.