Privacy Policy

Last Updated: October 11, 2026

This Privacy Policy describes how HideYourPhotos ("the App", "we", "us", "our") handles your information. By using the App, you agree to the practices described in this policy.

1. Overview

HideYourPhotos is a personal media vault app for iPhone. It keeps your photos and videos private on your device.

The short version: Your photos, videos, album names, passcode and secret code never leave your device. So you can recover a forgotten passcode or secret code, we keep an account with your recovery email on our servers. The App is free and shows ads from Google AdMob, which receives limited technical information from your device (see section 5). Ads are not personalized and we never ask to track you.

2. Information We Do Not Collect

The App does not:

• Upload your photos, videos or album names to any server

• Send your passcode, secret code or Face ID data anywhere

• Show personalized ads or ask to track you across other companies' apps and websites

• Collect your precise location

• Sell your personal data

3. Information Stored Only on Your Device

3.1 Media Files

Photos and videos you import are saved in the App's sandboxed storage on your device. They are never uploaded. Ads are never shown next to your photos or videos.

3.2 Passcode and Secret Code

• Your 4-digit passcode (for locked albums) and your secret code (for hidden albums) are stored in the iOS Keychain with device-only protection. They are not backed up to iCloud and are never sent to us.

• If you turn on Face ID or Touch ID for locked albums, the check is handled entirely by iOS; we never receive biometric data.

3.3 App Preferences

Settings such as your language, appearance and album layout are stored locally on your device.

4. Your Account and Recovery Email

When you set up a passcode, you add a recovery email and confirm it with a 6-digit code. This creates an account on our servers, so you can reset a forgotten passcode or secret code.

We store:

• Your email address and when it was confirmed

• An account ID and when the account was created

• A random ID for your installation of the App (not a hardware ID), the App version, and when it was last used

• Sign-in records, stored only in scrambled (hashed) form

• One-time codes, stored only in scrambled form; each code works once and expires after 15 minutes

We use your email only to send these codes. We don't send marketing emails, sell your email, or use it for ads.

These service providers process this data for us, only to run the service: Cloudflare (runs our server), Supabase (stores the account data, in the United States) and Resend (sends the code emails).

5. Advertising

The App uses the Google Mobile Ads SDK (Google AdMob) to show banner and full-screen ads. Ads are non-personalized: they are not based on your activity in other apps or websites. The App does not request permission to track you, so your device's advertising identifier (IDFA) is not available to Google or to us.

To deliver and measure ads and to prevent fraud, Google may collect:

• Your IP address, used to estimate your general location (such as your country)

• Device and app information, such as device model, iOS version, app version and language

• An app-specific device identifier (IDFV) and how you interact with ads (views and taps)

• Diagnostic data, such as crash and performance information related to ads

Google handles this data under its own policies: Google Privacy Policy and How Google uses information from sites or apps that use its services.

6. Your Choices (EEA, UK and Switzerland)

If you are in the European Economic Area, the UK or Switzerland, the App shows Google's consent message before ads can use information stored on your device. You can consent, decline or manage your options. You can change your choice at any time in Settings → Privacy Choices. If you decline, you may still see limited ads that do not use stored information.

7. Device Permissions

The App may request the following permissions:

• Photo Library: to let you import photos and videos, and, only if you choose "Delete from Photos", to move the originals you imported to Recently Deleted in the Photos app.

• Face ID: only if you turn it on, to open your locked albums.

The App does not request access to your camera, contacts, location, microphone or any other device feature.

8. Data Security

• All App data is stored inside the iOS app sandbox, which prevents other apps from accessing it.

• Your passcode and secret code are protected by the iOS Keychain, which provides hardware-backed encryption.

• Hidden albums go back into hiding, and locked albums lock again, whenever the App leaves the screen.

• Connections between the App and our server are encrypted (HTTPS).

While we rely on reasonable security measures, no security system is perfect, and we cannot guarantee absolute security.

9. Data Retention and Deletion

• Your photos, videos and settings stay on your device for as long as the App is installed. You can delete individual photos, videos or albums at any time, and uninstalling the App removes all of its data from your device.

• You can delete your account at any time in Settings → Delete account. This signs out every device and deletes your account.

• Information Google collects for ads is kept according to Google's own policies.

10. Children

The App is not directed at children under 13, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be shown by updating the "Last Updated" date at the top of this page. Continued use of the App after changes means you accept the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, or want your account record erased, please contact us at: idnan.se@gmail.com