Privacy Policy
Last updated: October 20, 2026
This policy explains what the Secure Vault app for iPhone and iPad (“Secure Vault”, “the app”) does with your information. Secure Vault is published by Nikmesoft Company, Ltd. (“Nikmesoft”, “we”). Questions: [email protected].
The short version
- Everything you put in your vault — photos, videos, files, notes, passwords and contacts — stays on your device. There is no Secure Vault account and nothing in your vault is sent to us.
- The only data that reaches us is anonymous crash and performance reports, used to fix bugs.
- We do not show ads, do not track you and do not sell any data.
Your vault
Photos, videos and files are encrypted on your device with AES-256-GCM before they are saved. The encryption key is created on your device and kept in the iOS Keychain; we never have it. File names and album names are not encrypted. Notes, passwords and contacts are stored in the app's database, protected by iOS Data Protection (they are unreadable while your device is locked).
Your vault is included in your device backups, still encrypted. You can open it on a new device after restoring from an iCloud backup or an encrypted computer backup, because those backups also carry the encryption key. A computer backup that is not encrypted does not carry the key, so a vault restored from it cannot be opened.
Your passcode is stored only as a salted one-way hash in the Keychain. We cannot recover a forgotten passcode or the files behind it. Deleting the app deletes your vault.
Information sent to us
| Information | Why |
|---|---|
| Crash reports: the state of the app when it crashed, device model, iOS version, app version, and an installation identifier generated by the crash reporter | To find and fix bugs (Firebase Crashlytics, operated by Google). Reports never contain the content of your vault and are not linked to your identity. |
| Performance and diagnostic data, such as app start-up time | To keep the app fast and stable (Firebase, operated by Google). Not linked to your identity. |
Purchases
Subscriptions and the lifetime purchase are handled by Apple. The app checks them on your device with Apple's StoreKit; we do not receive your name, Apple ID or payment details.
Features that connect to the internet or your network
- Private browser. Pages are loaded directly from the websites you visit, which see your request like any browser's. Cookies, cache and history are kept in memory only and are erased when you close the app. Images you download are encrypted into your vault.
- Wi-Fi transfer. When you turn it on, the app runs a small web server reachable only from your local Wi-Fi network, protected by a one-time PIN shown on your device. It stops when you leave the screen, after 10 minutes without activity, or when the app goes to the background. The connection is not encrypted (HTTP), so use it only on a Wi-Fi network you trust.
Permissions
- Photos — to import the photos and videos you choose and, if you ask, delete the originals from your library.
- Camera and microphone — to take photos and record videos directly into your vault.
- Face ID / Touch ID — to unlock the vault. Biometric data never leaves Apple's secure hardware and is not available to the app.
Children
Secure Vault is not directed to children under 13 and we do not knowingly collect information from them.
Your choices and rights
You can delete any item in the app at any time; deleting the app removes the whole vault from your device. Since crash and performance reports are not linked to you, we cannot identify them as yours, but you may contact us at [email protected] with any request about your data.
Changes
We will update this page when the app's handling of data changes, and change the date at the top.