Privacy Policy

Effective 19 October 2026

Who we are

Glyphsafe ("we", "us") is an app made in the Philippines. You can reach us at [email protected].

What stays on your phone

Everything you put in a vault is stored only on your device, in Glyphsafe's private storage, and is encrypted with AES-256-GCM before it's saved. This includes:

• photos, videos and other files you add;
• thumbnails, file names, sizes, dates and other details about those files;
• the list of what's in each vault.

Your pattern and recovery phrase are used on your phone to create the keys that unlock your vault. Neither is stored or sent anywhere. Because we never have your keys, we cannot open, recover or hand over the contents of your vault to anyone.

What we don't collect

• No account, name, email address or phone number.
• No contacts, location or browsing history.
• No advertising identifiers, ads or third-party tracking.
• No analytics on what you store or how you use your vaults.

Information handled by service providers

A few features need outside services. They receive only what's listed here, never your vault contents or keys.

• Google Play processes payments for Glyphsafe Pro. Google handles your payment details under its own privacy policy; we never see your card or billing information.
• RevenueCat checks whether you have an active Glyphsafe Pro subscription. It receives a random, anonymous app user ID created on your phone, your purchase and subscription details from Google Play, and basic technical information such as app version, device type, operating system and IP address. See RevenueCat's privacy policy.
• Expo delivers app updates. When the app checks for an update, Expo's servers receive basic technical information such as app version, platform and IP address. See Expo's privacy policy.

We don't sell or share your personal information for advertising.

Permissions

• Photos and videos: when you add files, Android's photo picker shows only the items you choose. If you ask Glyphsafe to delete the originals from your gallery, Android asks for permission at that moment.
• Internet: used only for subscriptions and app updates as described above.

Screenshots and the recent-apps view

Glyphsafe blocks screenshots and screen recording of the app and hides its contents in Android's recent-apps view.

How long data is kept

Vault contents stay on your phone until you delete them or uninstall Glyphsafe. Uninstalling the app deletes all vaults on that phone permanently. Subscription records are kept by Google Play and RevenueCat for as long as needed to provide your subscription and meet legal obligations.

Deleting your data

There's no account to delete. To remove everything, delete your vault items in the app or uninstall Glyphsafe. To cancel Glyphsafe Pro, go to Google Play → Payments & subscriptions → Subscriptions. To ask about subscription data held by RevenueCat, email us. Step-by-step instructions are on our Delete your data page.

Your rights

Depending on where you live, including under the Philippine Data Privacy Act of 2012 and US state privacy laws, you may have the right to access, correct or delete personal information about you. Since we don't hold your vault contents or any account information, most requests can be handled by you on your own phone. For anything else, email [email protected].

Children

Glyphsafe is intended for adults aged 18 and over. We don't knowingly collect information from children.

Security

We use standard, well-reviewed cryptography: AES-256-GCM for encryption and PBKDF2-SHA256 with 600,000 iterations to derive keys from your pattern and recovery phrase. No system is perfectly secure, and the safety of your vault also depends on your phone, its operating system and keeping your pattern and recovery phrase private.

Changes to this policy

If we add features that change how data is handled, such as backup or sharing, we'll update this policy and the date above before those features are released.

Contact

Glyphsafe · [email protected]