TL;DR: We can't see your photos. We can't decrypt your photos. We don't know what you store. Nu11VLT uses zero-knowledge encryption where everything happens locally on your device. No cloud sync. No servers. No analytics.
1. Information We DON'T Collect
Nu11VLT is designed with a zero-knowledge architecture. This means we literally cannot see your data, even if we wanted to.
- Your photos (they're encrypted locally)
- Your encryption keys (stored in iOS Keychain)
- Photo metadata or EXIF data
- Personal information (name, email, location)
- Device identifiers or analytics
- Usage statistics or telemetry
- Crash reports or diagnostics
- Browsing history or app behavior
2. How Nu11VLT Works
Nu11VLT operates entirely on your device:
- Photos are encrypted locally using ChaCha20-Poly1305 AEAD
- Encryption keys are stored in iOS Keychain (hardware-backed)
- Encrypted files are saved to your device's Documents directory
- No network requests are made (100% offline)
- No data is sent to our servers (we don't have servers)
3. Local Storage
All data stored by Nu11VLT remains on your device:
- Encrypted photos (.n11 files in Documents/Nu11Vault and Documents/Nu11Fade)
- Encryption keys (iOS Keychain with hardware protection)
- App preferences (theme, settings - stored in UserDefaults)
- SwiftData database (photo metadata like date added, expiry timers)
No cloud storage. No iCloud sync. No remote servers.
4. Face ID / Touch ID
Nu11VLT uses iOS Local Authentication framework for biometric unlock:
- Face ID/Touch ID data never leaves your device
- We don't store biometric templates
- We don't have access to your biometric data
- iOS handles all biometric authentication locally
5. Password & PIN Security
Nu11VLT uses state-of-the-art password hashing:
- All PINs are hashed with Argon2id (memory-hard algorithm)
- Argon2id is the winner of the Password Hashing Competition (2015)
- Specifically designed to resist GPU/ASIC cracking farms
- PIN hashes are stored in iOS Keychain (not UserDefaults)
- We never store or transmit your actual PIN
6. Third-Party Services
Nu11VLT uses minimal third-party services:
RevenueCat (In-App Purchases) - Handles Pro subscription/purchase verification. Collects anonymous purchase receipts only.
That's it. No analytics SDKs. No crash reporters. No ad networks. No tracking pixels.
7. Your Rights
Since we don't collect your data, there's nothing to:
- Request (we don't have it)
- Delete (it doesn't exist on our side)
- Export (it's already on your device)
- Correct (we never stored it)
- Transfer (it never left your device)
Your privacy is protected by design, not by promise.