HushboxPrivacy Policy
Who we are
Hushbox is published by Zero Day Enterprises LLC (“we”, “us”). Contact: support@hushboxapp.com.
What stays on your device
Everything you put into Hushbox is stored only on your device, inside the app’s private storage, encrypted with AES-256-GCM before it is written:
| Data | Where | Who can read it |
|---|---|---|
| Photos and videos you add, their file names, dates and albums | Encrypted vault on your device | Only you, with your passcode, Face ID or recovery key |
| Thumbnails | Encrypted, on your device | Only you |
| Intruder records (time, number of failed attempts and, if you turned the feature on, one front-camera photo) | Encrypted, on your device | Only you, after unlocking |
| A random device key and, if you turn on Face ID, your vault key | The iOS Keychain, restricted to this device | Only Hushbox on this device; Face ID is handled entirely by iOS |
Your passcode and recovery key are never stored and never leave your device. We cannot see, reset or recover them, and we cannot open your vault.
Device backups
If your iPhone is backed up to iCloud or a computer, the encrypted vault files are included in that backup as unreadable ciphertext. The device key that your passcode depends on is never included in backups, so a vault restored to another device can only be opened with your recovery key.
Permissions the app asks for
| Permission | Why |
|---|---|
| Photos | Adding items uses the iOS photo picker, which gives Hushbox only the items you select. Full library access is requested only if you choose to delete the originals after they are safely in your vault. |
| Camera | To take photos and videos straight into your vault with the secret camera, and, only if you turn on Intruder photo, to take one photo when wrong passcodes are entered. Nothing is saved to your photo library. |
| Face ID | To unlock your vault if you turn it on. iOS performs the face match; Hushbox never receives biometric data. |
| Motion sensors (no prompt) | To lock the vault when the phone is placed face down. Readings of the phone’s orientation are used instantly on the device and never stored. |
Purchases
Hushbox Pro is sold through Apple’s App Store. Apple processes the payment; we never receive your name, payment details or Apple ID. The app checks your purchase on the device using Apple’s StoreKit. Apple provides developers with aggregated sales reports that do not identify you. See Apple’s Privacy Policy.
Crash reports
The app contains no crash-reporting or analytics SDK. If you have enabled Share With App Developers in iOS Settings, Apple may share anonymous crash reports and usage statistics with us. You can turn this off at any time in Settings › Privacy & Security › Analytics & Improvements.
Support emails
If you email us, we receive your email address and whatever you write. We use it only to reply, never for marketing, and delete the conversation within 90 days after it is resolved unless you ask us to keep it.
This website
This website uses no cookies, analytics, advertising, fonts or scripts from third parties. Our hosting provider may keep standard server logs (such as IP address and pages requested) for security, for a limited time.
Children
Hushbox is not directed to children under 13 and we do not knowingly collect information from anyone.
Your rights
Because we do not hold personal data about Hushbox users, there is usually nothing for us to access, correct or delete. If you have emailed us, you can ask us to delete that correspondence at any time. Residents of the EU, UK, California and other regions with privacy laws may contact us with any request at the address above.
To delete everything stored by Hushbox on your device, delete the app. Without your recovery key, a deleted vault cannot be recovered by anyone, including us.
Changes
If this policy changes, we will update the date above and describe the change here. We will never start collecting personal data without asking you first in the app.