Privacy Policy — Fotolok

Last updated: July 2026 · LogicGateGames LLC

1. Data We Do NOT Collect

• Your photos and videos — encrypted and stored only on your device; never uploaded to us or anyone else.
• Personal information — no account, no name, no email address, no phone number.
• Usage analytics — we do not track how you use the app. There is no analytics SDK.
• Advertising data — Fotolok shows no ads and contains no advertising SDK. It does not collect or share an advertising ID.
• Location, contacts, or camera — the app does not request the camera permission and does not access your location or contacts.

2. Data Stored On Your Device Only

• Hidden photos and videos — encrypted with AES-256-GCM. The encryption key is generated on your device and held in the Android Keystore; it never leaves the device.
• Your PIN — stored only as a salted PBKDF2 hash, never as the PIN itself. We cannot recover it.
• App settings — such as your feature choices (fingerprint unlock, decoy vault, disguise).
• A local log of failed unlock attempts — the time and the number of digits tried. No photo is taken; there is no camera.

All of the above lives in the app's private storage and is excluded from Android's automatic cloud backup.

3. Backups You Create

Fotolok lets you create an encrypted backup file so you don't lose your photos if you uninstall or change phones. This backup is:

• Encrypted with a passphrase you choose (separate from your PIN).
• Saved to a location you pick using Android's system file picker — for example your Downloads folder or a cloud-drive folder.

Fotolok never uploads this file and does not know where you save it. If you choose to store it in a cloud service, that service's own privacy policy governs the file while it is stored there. Keep your backup passphrase safe: without it, the backup cannot be opened by anyone, including us.

4. Permissions

• Photos and videos — so you can choose which items to move into the vault. Selected items are encrypted on your device.
• Fingerprint / biometric — optional, to unlock the vault without typing your PIN. Biometric data is handled entirely by Android and never seen by the app.
• Internet — Fotolok's own code never opens a network connection and never uploads anything. This permission is present because the Google Play Billing library (used for the optional in-app purchase) and Google Play's in-app review feature include it. The app does not use the network for any other purpose.

5. Purchases

Fotolok offers an optional in-app purchase that unlocks additional capacity. Payments are processed entirely by Google Play. We never receive your card or payment details. Google's handling of the transaction is governed by Google's Privacy Policy.

6. Third-Party Services

Fotolok uses Google Play Billing and Google Play In-App Review, both provided by Google Play Services on your device. It uses no advertising networks, no analytics services, and no other third-party data services.

7. Data Deletion

Because we hold none of your data on any server, there is nothing for us to delete on our side. Uninstalling Fotolok removes all vault data from your device. If you have saved a backup file elsewhere, delete that file separately.

8. Children

Fotolok is not directed at children and does not knowingly collect personal data from children.

9. Changes

If this policy changes, the updated version will be posted at this URL with a revised date.

10. Contact

LogicGateGames LLC — logicgategames@gmail.com