Photo Vault (Umbra) - Privacy Policy

Your privacy is the entire point of this app. This Privacy Policy explains how Photo Vault ("Umbra", the "App") handles information. In short: the App stores everything locally on your device, has no internet permission at all, contains no ads, no analytics and no tracking, requires no account or login, and does not collect or send any of your personal data to us or to any server.

1. Information accessed and core functionality

Umbra is an offline, encrypted vault for photos, videos and files, unlocked by drawing a pattern. All of its features run on your device:

• Your content (stored locally and encrypted): The photos, videos and files you add, any folders and vault names you create, and your settings are stored in the App's private storage on your device. Each file is encrypted with AES-256-GCM before it is written. The encryption key is derived from your unlock pattern (using Argon2id) and exists only in memory while the vault is open - your pattern is never stored anywhere. This data never leaves your device and is never uploaded to us or to any server.
• Each pattern is its own vault: A pattern is a key, not a password checked against a stored value. Nothing is stored to verify it; your files simply decrypt correctly with the right pattern, or stay unreadable. Because of this, there is no account recovery - if you forget a pattern and have not made a backup, that vault's contents cannot be recovered by us or anyone.
• Photos and videos you import (media permission): When you import from your device, the App reads the images and videos you select and copies them into the App's encrypted private storage. You may optionally choose to delete the originals from your device after import; Android asks you to confirm that deletion.
• Files you import (document picker): When you add documents, you pick them with the Android document picker; only the files you choose are copied into the vault and encrypted. You may optionally delete the originals.
• Camera: When you use the in-app camera, photos and videos are captured and saved directly into the encrypted vault - never to your device's public gallery.
• Exporting and opening files: You can export an item back out of the vault to your device's storage, or open it in another app of your choice. When you do this, that specific file is decrypted and handed to the destination you selected (your gallery/Downloads, or the app you pick). From that moment the file is outside the vault and under your or that app's control. This only ever happens when you explicitly choose it.
• Fingerprint unlock (optional, Pro): If you enable it, Android's biometric system lets you reopen your last vault with your fingerprint. The biometric check is performed entirely by Android (via the Android Keystore and BiometricPrompt); your fingerprint data never reaches the App and never leaves your device. Your pattern always keeps working, and fingerprint unlock works on this device only.
• Decoy & duress and the Break-in log (optional, Pro): You can set a separate "duress" pattern that opens a harmless decoy vault and quietly records the attempt in an on-device log. If - and only if - you turn on "intruder photo", a silent front-camera photo is taken on logged unlock attempts and stored encrypted on your device. These photos are never uploaded; you can delete them and clear the log at any time.
• Local processing: All encryption, decryption, thumbnails and content handling happen locally on your device.

2. Subscriptions and purchases

Umbra is free to use and offers an optional Umbra Pro upgrade (weekly and yearly subscriptions, and a one-time lifetime purchase) through Google Play Billing.

• Payment processing: All payments are handled by Google Play. We do not collect or store your credit card numbers, bank details, or physical addresses.
• Transaction data: Google Play may provide us with limited order information (such as order IDs, purchase dates and country) for accounting and refund purposes, as described in Google's policies.
• No network in the App: The App itself has no internet permission and never connects to the network. Showing plan prices, processing purchases, restoring previous purchases, and the optional in-app rating prompt are all handled by the Google Play app already on your device - none of your vault content is involved or transmitted.
• Google Privacy Policy: https://policies.google.com/privacy

3. No advertising, analytics or tracking

• The App contains no advertisements and no advertising SDKs.
• The App does not use your Android Advertising ID.
• The App does not use analytics, crash reporting or any other third-party tracking tools.

4. Data protection and user rights

• No personal data collected: We do not collect names, email addresses, phone numbers, location, device identifiers or usage data. The App requires no account or login.
• Local data: All application data - your photos, videos, files, folders, vault names, settings, break-in log and any intruder photos - remains encrypted in the App's private storage on your device. Uninstalling the App, or clearing the App's data in Android settings, permanently deletes this data. Because there is no cloud copy, an exported encrypted backup is the only way to recover a vault.
• GDPR / RODO: Users in the European Economic Area have the right to access, correct, or delete their personal data and to object to its processing. Because the App does not collect personal data and all your data stays on your device, you have full control over it directly in the App or by uninstalling it. For questions, contact us using the details below.

5. Children's privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children, and the App does not collect personal information from any user.

6. Security measures

• Your files are encrypted with AES-256-GCM; the key is derived from your pattern with Argon2id and kept in memory only while the vault is unlocked.
• Vault data lives in the App's private storage, which other apps cannot access.
• The App can auto-lock when it goes to the background, and blocks screenshots and the Recents preview to avoid leaking vault contents.
• Because no personal data is sent to or stored on our servers, there is no risk of data breaches involving our systems. The trade-off for this design is that only you hold the key: if a pattern is lost and no backup exists, the data is unrecoverable.

7. Updates to this Privacy Policy

We may update this Privacy Policy to reflect changes in our App or legal requirements. The latest version will always be available at this link and via the Google Play Store.

8. Contact us

If you have questions about this Privacy Policy, please contact us at: br.programmer@yahoo.com