Privacy Policy
TigerVault keeps photos, videos and files in encrypted vaults on your device. It is available for Android phones and for iPhone and iPad, and this policy covers both. Where the apps differ, the section says which one it means. In short: TigerVault has no servers and no accounts. We, the developer, never receive your files, your pattern, your recovery words or any usage data.
What stays on your device
- Your vaults: the photos, videos and files you add, their thumbnails, names and folders. All of it is encrypted with AES-256-GCM before it is written to storage, using keys that only your pattern or your recovery words can unlock.
- Your pattern and recovery words are never stored. They are turned into keys with Argon2id when you use them and then discarded.
- App preferences such as theme, haptics and the app icon you picked.
Android: TigerVault's data is excluded from Android's own cloud backup. Uninstalling the app, or clearing its storage in Android settings, deletes everything on the phone.
iPhone and iPad: deleting the app deletes its data from the device. TigerVault's vault files are excluded from your device's own iCloud and computer backups. Their only copy off the device is the encrypted one kept by iCloud backup and sync, below.
Camera and microphone
The secure camera saves what you capture straight into your vault, encrypted, and never into your device's photo library or gallery. TigerVault uses these permissions only while you are using the secure camera.
- Android: the camera for photos and videos, and the microphone when you record video.
- iPhone and iPad: the camera for photos. The iOS app does not use the microphone.
Adding and sharing files
You add photos, videos and files with the system pickers, so TigerVault sees only the items you choose. On iPhone and iPad, the photo picker needs no access to your photo library. You can also open or share a file from your vault with another app. TigerVault decrypts it for that, and once it leaves the vault, that app's own privacy policy applies.
Optional backup to your Google Drive (Android)
If you turn on Backup for a vault, TigerVault signs in to Google with your permission and stores the vault in a hidden app folder in your own Google Drive (the drive.appdata scope, which cannot see your other Drive files). Everything is encrypted on your phone before upload, so Google stores only unreadable data, and we cannot read it either. Google's handling of your Drive is covered by the Google Privacy Policy. You can turn Backup off at any time, and remove the backup from Google Drive → Settings → Manage apps.
iCloud backup and sync (iPhone and iPad)
When you are signed in to iCloud, TigerVault backs up your vaults to the private iCloud database of your own Apple Account and keeps them in sync on the iPhones and iPads signed in to it. Everything is encrypted on your device before upload, so Apple stores only unreadable data, and we cannot read it either. Apple's handling of your iCloud data is covered by the Apple Privacy Policy.
- Turn it off at any time in TigerVault's settings, under iCloud backup & sync.
- Deleting a vault in TigerVault's settings deletes its files from this device and from iCloud.
- To remove all of TigerVault's iCloud data, go to the iOS Settings app → your name → iCloud → Manage Account Storage → TigerVault.
What we do not collect
TigerVault contains no analytics, no advertising, no crash reporting and no tracking SDKs. It does not use an advertising identifier, your location or your contacts. It does not sell or share any data, because we never receive any.
Google Play and the App Store may collect information about your download and device under their own policies.
If you lose access
Because we never hold your keys, we cannot open or recover a vault for you. Your pattern or your nine recovery words are the only way in.
Children
TigerVault is not directed at children under 13.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions: hsyvy7@gmail.com