Your files are encrypted on-device. We never see them.

1 Data We Collect

We collect no personal data. Everything you store in My Folder—photos, videos, audio recordings, notes, scanned documents, and other files—is encrypted and saved entirely on your device.

We do not collect:

• Accounts or login information on our servers
• Analytics, telemetry, or usage data
• Advertising identifiers
• Location data
• Contacts or call logs

2 How Your Data Is Used

All data you add to the vault is used only within the app to display, organise, and play back your files. Specifically:

• Photos, videos, audio, and documents are encrypted and stored locally for your private access.
• Metadata (file names, sizes, thumbnails) is stored in an encrypted local database to power search, sorting, and grid views.
• Your vault password and recovery seed phrase are stored on-device only, protected by the Android Keystore.

There are no secondary uses, profiling, or tracking of any kind.

3 Encryption & Security

Security is the core of My Folder. Every file is protected before it even touches storage:

• AES-256-GCM envelope encryption — each file gets its own random key, wrapped with your master key.
• Argon2id key derivation — your password is hardened with memory-hard hashing (64 MB, 3 iterations).
• SQLCipher-encrypted database — all metadata is stored in an encrypted Room database.
• EncryptedSharedPreferences backed by the Android Keystore for key storage.
• UUID-based filenames on disk and in the cloud—no original file names are ever exposed.
• Secure deletion — configurable overwrite passes (quick, DoD 5220.22-M, or Gutmann) when you delete files.
• Screenshot prevention — FLAG_SECURE is applied to viewer screens.

4 Vault Access & Authentication

• Password-protected vault with minimum 8-character requirement and strength validation.
• Biometric unlock (fingerprint / face) via the AndroidX Biometric library—credentials never leave the secure hardware.
• Auto-lock when the app is backgrounded (configurable: immediate, 1 min, 5 min, or never).
• 12-word BIP39 recovery seed for vault recovery if you forget your password.
• Stealth / Calculator mode — the app can disguise itself as a calculator in the launcher. Entering your PIN unlocks the hidden vault.
• Panic wipe — a special PIN instantly and irreversibly destroys all vault data.

5 Cloud Backup (Optional)

My Folder lets you optionally back up encrypted files to a cloud provider you choose and configure. Supported destinations:

• S3-compatible storage — AWS S3, Backblaze B2, MinIO, Wasabi, DigitalOcean Spaces
• Google Drive — via OAuth 2.0 (app-scoped access only; we cannot read other Drive files)
• WebDAV — Nextcloud, ownCloud, Koofr, Icedrive, and others

Cloud credentials (endpoints, tokens) are stored locally in encrypted storage. Vault Byte does not operate, access, or proxy any cloud servers. All connections are made directly between your device and the provider you configure.

6 Permissions

My Folder requests only the permissions needed for its features:

No permission is used for tracking or data collection. Camera hardware is declared as not required—the app works on devices without a camera.

7 Third-Party Services

My Folder integrates the following services only when you opt in:

• Google Drive API & Google Sign-In — used solely for Google Drive backup. Access is limited to files created by the app (drive.file scope). Governed by Google's Privacy Policy.
• Google ML Kit Document Scanner — runs on-device for document scanning with edge detection. A small ML model may be downloaded from Google on first use.

8 Data Sharing

When you use optional cloud backup, encrypted data is sent only to the storage provider you configure. Vault Byte has no access to your cloud accounts or uploaded files.

9 Data Retention & Deletion

• All data lives on your device (and optionally in your cloud account). We retain nothing.
• Uninstalling the app permanently deletes all local vault data.
• Android system backup is disabled (allowBackup="false") to prevent accidental data leakage.
• You can delete individual files at any time with configurable secure-deletion levels.
• The panic-wipe feature lets you instantly destroy all vault data in an emergency.

10 Children's Privacy

My Folder is not directed to children under the age of 13 and does not knowingly collect data from minors.

11 Changes to This Policy

Any updates to this Privacy Policy will be published here with a revised "Last updated" date. We remain committed to keeping your data private, encrypted, and under your control.

12 Contact

If you have any questions or concerns about this Privacy Policy, please contact us: