Privacy Policy

Last updated October 26, 2026

Hushtrove is built so that your data never reaches us. This policy explains what that means in practice.

The short version

• The app doesn't collect, store, sell or share any personal data.
• There's no account, no analytics, no advertising and no tracking.
• Everything you add is encrypted on your iPhone with keys we never have.

What the app stores, and where

The photos, videos, files and notes you add, along with album names and search information, are kept in Hushtrove's private storage on your iPhone, encrypted with AES-256. They don't appear in the Files app or in iPhone backups made with iCloud or a computer.

Your settings, such as the Auto-Lock time, are stored on your iPhone.

iCloud backup and sync

iCloud backup is off until you turn it on. When it's on, Hushtrove uploads your vault to the private CloudKit database in your own iCloud account. Everything is encrypted on your iPhone before it's uploaded and stored under random names, so Apple sees only scrambled data.

So that you can restore on a new iPhone, a copy of your vault key is stored in your iCloud Keychain. That copy is itself encrypted with your passcode, and Apple protects iCloud Keychain with end-to-end encryption.

We have no access to your iCloud account or anything in it. Apple's handling of iCloud is covered by Apple's Privacy Policy.

Purchases

Hushtrove Pro is sold by Apple through the App Store. Apple processes the payment, and we never see your payment details or your Apple Account. Apple gives us sales reports that don't identify you.

Permissions the app asks for

• Photos: to delete originals from your library after you've moved them into the vault, and only when you ask. Choosing photos to import doesn't need this permission.
• Camera and microphone: for the in-app camera and, if you turn it on, Intruder Selfie. Pictures and videos go straight into the encrypted vault.
• Face ID: handled entirely by iOS. Hushtrove only learns whether the check succeeded and never receives any face data.

Panic Lock uses your iPhone's motion sensors, only while Hushtrove is open, to notice when you flip it face down. Hushtrove never asks for your location. It can remove location details that are already embedded in your photos.

Processing on your iPhone

Search uses Apple's on-device Vision framework to recognize text and objects in your items. The results are stored inside the encrypted vault and never leave your iPhone, except as part of your encrypted iCloud backup if you turn it on.

Crash reports

Hushtrove contains no crash-reporting or analytics code. If you've chosen to share analytics with app developers in iOS Settings, under Privacy & Security › Analytics & Improvements, Apple may send us anonymous crash reports. You can turn this off at any time.

Emails to us

If you email us, we receive your email address and whatever you write. We use it only to reply to you, and delete it when it's no longer needed. We will never ask for your passcode or Recovery Key.

This website

hushtrove.com doesn't use cookies, analytics, scripts or third-party content. Our hosting provider may keep standard server logs, such as IP addresses, for a short time to keep the site running and secure.

Children

Hushtrove doesn't collect personal data from anyone, including children.

Your choices

Because we hold no personal data from the app, there's nothing for us to access, correct or delete on your behalf. Your vault is fully under your control:

• Deleting Hushtrove erases the vault on that iPhone.
• To remove your iCloud backup, open Hushtrove's Settings, choose iCloud Backup and tap Delete iCloud Backup.

Changes to this policy

If we change this policy, we'll update this page and the date at the top. If a change affects how the app handles your data, we'll also explain it in the app's release notes.