Privacy Policy — Fotolok

Last updated: November 2026 · LogicGateGames LLC

1. Data We Do NOT Collect

• Your photos and videos — encrypted and stored only on your device; never uploaded to us or anyone else.
• Personal information — no account, no name, no email address, no phone number.
• Usage analytics — we do not track how you use the app. There is no analytics SDK.
• Advertising ID — Fotolok does not collect or share an advertising ID.
• Location, contacts, or camera — the app does not request the camera permission and does not access your location or contacts.

2. Data Stored On Your Device Only

• Hidden photos and videos — encrypted with AES-256-GCM. The encryption key is generated on your device and held in the Android Keystore; it never leaves the device.
• Your PIN — stored only as a salted PBKDF2 hash, never as the PIN itself. We cannot recover it.
• Your recovery word (optional) — stored the same way, never as the word itself. We cannot recover it.
• App settings — such as your feature choices (fingerprint unlock, decoy vault, disguise).
• Album names and details of what you hide — the albums you create, and each hidden item's original file name and folder. File names and folders are stored encrypted.
• A local log of failed unlock attempts — the time and the number of digits tried. No photo is taken; there is no camera.

All of the above lives in the app's private storage and is excluded from Android's automatic cloud backup.

3. Backups You Create

Fotolok lets you create an encrypted backup file so you don't lose your photos if you uninstall or change phones. This backup is:

• Encrypted with a passphrase you choose (separate from your PIN).
• Saved to a location you pick using Android's system file picker — for example your Downloads folder or a cloud-drive folder.

Fotolok never uploads this file and does not know where you save it. If you choose to store it in a cloud service, that service's own privacy policy governs the file while it is stored there. Keep your backup passphrase safe: without it, the backup cannot be opened by anyone, including us.

4. Permissions

• Photos and videos — on Android 13 and later, Fotolok uses Android's system photo picker, so you choose which items to move into the vault and the app requests no photo or video permission. On Android 12 and earlier it asks for access to your photos and videos to show its own gallery, and on Android 9 and earlier also for permission to delete the originals. Where it has that access (Android 10 to 12), it also uses the "Access media location" permission so a hidden photo keeps its location details; they stay inside the encrypted copy and never leave your phone. Selected items are encrypted on your device. Once the encrypted copies are saved, Fotolok asks Android to delete the originals from your gallery; on Android 11 and later, Android shows its own confirmation first. Items that live only in a cloud photo library are copied into the vault and their originals stay in that library. If you choose Unhide to gallery, an ordinary, unencrypted copy of that item is written back to your device's shared photo storage.
• Fingerprint / biometric — optional, to unlock the vault without typing your PIN. Biometric data is handled entirely by Android and never seen by the app.
• Internet — Fotolok's own features never use the network and never upload your photos or videos. The permission is added by Google Play Billing and Firebase Crashlytics, which sends a crash report when the app crashes. In-App Review is handled by the Google Play Store app on your device.

5. Purchases

Fotolok offers an optional in-app purchase that unlocks additional capacity. Payments are processed entirely by Google Play. We never receive your card or payment details. Google's handling of the transaction is governed by Google's Privacy Policy.

6. Third-Party Services

Fotolok uses Google Play Billing and Google Play In-App Review, both provided through the Google Play Store app on your device, and Firebase Crashlytics for crash reports. It uses no analytics services.

• Firebase Crashlytics — If the app crashes, Crashlytics sends a crash report so we can fix the problem. A report contains the error's technical details (stack trace), device model, Android version, app version, the type of build and the name of the app store it was installed from, and a random Crashlytics installation ID. It never includes your content, such as your photos and videos, and it contains no name, email or advertising ID. Reports are processed by Google and kept for up to 90 days. We do not sell or share them.

7. Data Deletion

We hold none of your photos, videos or vault data on any server, so there is nothing of yours for us to delete. The only data we receive is a crash report if the app crashes, and crash reports are deleted automatically after 90 days. Items you delete inside the vault go to the in-app recycle bin first, where they stay encrypted, and are removed permanently after 30 days or when you empty the bin. Uninstalling Fotolok removes all vault data from your device. If you have saved a backup file elsewhere, delete that file separately.

8. Children

Fotolok is not directed at children and does not knowingly collect personal data from children.

9. Changes

If this policy changes, the updated version will be posted at this URL with a revised date.

10. Contact

LogicGateGames LLC — logicgategames@gmail.com