Privacy policy

Last updated 10 September 2026

Lock My Files collects no data. Not anonymised data, not analytics, not crash reports, not an email address.

Why this is not just a promise

The Android build ships without the INTERNET permission. An app without that permission cannot open a network connection — the operating system refuses, regardless of what the code asks for. You can confirm this yourself: open Android's Settings, find the app, and look at its permissions.

The complete list of permissions the app requests is: fingerprint or face unlock, detecting that a screenshot was taken, keeping the screen awake while a video plays, and reading whether the phone is online. The last one arrives with the video player component; without internet permission it can report connectivity but cannot use it.

What is stored, and where

Your files are encrypted and stored in the app's private storage on your device. Nothing is uploaded. There is no server to upload to — this product has no backend at all.

Encryption keys are derived from the password you type and are held in memory only while a vault is open. They are never written to disk. Your passwords and recovery words are never stored anywhere, which is also why nobody can reset them for you.

Purchases

The app is sold as a one-time purchase through the App Store and Google Play. Those stores handle the payment before you download; the app itself contains no billing code and never sees your payment details. Apple and Google apply their own privacy policies to that transaction.

Children

The app is not directed at children and collects no information from anyone, including children.

Changes

If a future version ever needed to send data anywhere, that would require adding the internet permission, which Android shows the user. This page would be updated before that shipped.

Contact

hello@lockmyfiles.app