Privacy Policy
Effective November 1, 2026. Photo Vaulty is an iPhone app developed by ALPHABETSKI INC. The app is in development; this policy describes the current implementation.
Your vault content
Photos, videos, previews and sensitive library metadata are encrypted locally with AES-256-GCM. We do not operate a photo-storage server or hold a master recovery key. Your passwords and recovery keys are not transmitted to our purchase services. Optional Face ID or Touch ID is handled locally by Apple’s authentication system; we do not receive facial or fingerprint data.
Purchases
Apple processes payments. RevenueCat processes purchase records and an anonymous purchase identifier for Pro access validation, restore support and purchase analytics. Optional device-identifier collection and SDK diagnostics are disabled. We do not use advertising identifiers or cross-app advertising tracking. Our App Store privacy draft conservatively discloses User ID and Purchase History for App Functionality and Analytics, with linked-data association. The purchase identifier is not your vault name, photo content, password or recovery key.
Imports, exports and sharing
Imports leave source copies in Apple Photos. Explicit exports may create unencrypted copies outside the vault. Encrypted sharing and transfers send files to destinations you select; those services may observe file size and timing. Copies on other devices do not automatically update or delete with the original. We cannot revoke exported copies.
Deletion and retention
The app retains your local vault until you delete its content or the app. Recently Deleted retains local encrypted media for up to 30 days. Opt-in duress deletion removes all local vaults and device-held keys, but not independent backups, Apple Photos originals, shared copies or flash-storage remnants. Apple and RevenueCat retain purchase records according to their own policies and applicable requirements.
This website
The landing page has no analytics scripts, advertising trackers, signup form or vault access. Our hosting and domain providers may process ordinary request data such as IP addresses and server logs to deliver and secure the site. Do not send private media, passwords or recovery keys to support.
Your choices
You control imports, exports, local deletion, optional biometrics and purchases. Manage subscriptions and refund requests through Apple. A lost recovery key cannot be reset by us. For privacy questions, email justice@alphabetski.com or see our support page.