Privacy Policy

The short version

Shadow Locker collects no data. There is no account, no sign-in, no email capture, no analytics SDK, no advertising SDK, no crash reporter, no push notification, no iCloud, and no server belonging to us. Your vault contents, your password, and any metadata about your usage never leave your device. The App Store privacy label for this app is Data Not Collected.

Each of those sentences is built into the app and checked continuously — if any of them stops being true, the release build fails.

What the app stores, and where

• Your content — notes, photos, videos, audio recordings and files — is encrypted on the device before it touches storage, and written only to the app's own sandboxed storage. Each item is sealed individually under its own key, derived from your password. We never receive a copy and could not decrypt one if we had it.
• Your password never leaves the device in any form. It is used only on the device to derive the keys that unlock your vault, and it exists in recoverable form nowhere else — not on a server, not with us, nowhere. Nobody can reset it and nobody can recover it — including us.
• Non-sensitive structure — item kind, creation dates, folder and tag relationships, byte counts — is stored in plaintext on the device so list screens can render without unlocking. It reveals that items exist, never what they contain.
• Thumbnails, waveforms and the search index are caches on the device, wiped when the app locks or backgrounds. They never persist on disk in the clear.

Network access

The app makes no network connections of its own. Its only network access is to the App Store, through Apple's StoreKit, when you choose to purchase or restore Premium. It is fully functional in airplane mode.

The Share Extension — the component that lets you save items into the vault from other apps — runs in a separate process, never decrypts anything, and never fetches shared URLs; a shared link is stored as text.

Backups

Premium backups are passphrase-protected archives that you choose to save, wherever you like — Files, iCloud Drive, a Mac, anywhere. They are sealed with a passphrase you set, not one we hold. We never see the file or the passphrase.

Children

The app is rated 4+, collects no data from anyone of any age, and contains no advertising, chat, or user-generated content.

This website

This page is hosted on crnet.net. The website loads Google Analytics to count visits to the site; it is separate from the app, receives nothing from the app, and cannot see your device or your vault. The app itself contains no analytics and no tracking of any kind — the distinction the App Store label "Data Not Collected" refers to.

Changes and contact

If a future release ever changes what the app collects, this page, the app's privacy manifest and the App Store privacy label all change with it — a silent change is not possible.

Questions? Contact CrNet Inc. through crnet.net.