Vailuna

Privacy Policy

Last updated: 2026-07-16

Vailuna ("the app", "we") is a local, end-to-end encrypted file manager. This policy explains how the app handles your data — most importantly: the app has no backend server of its own. The developer cannot access, and has no way to collect, any file content you store in your vault.

1. Core principles

  • Your photos and files are encrypted on-device with XChaCha20-Poly1305 (keys derived via Argon2id) before they ever leave your device. Keys are derived from your password/biometrics; the developer never holds them and cannot recover them.
  • When you sync to iCloud / Dropbox / Google Drive, the server only ever stores ciphertext — it cannot read your file contents or filenames.
  • The app runs no server of its own, contains no advertising SDK, no third-party analytics SDK, and does no user behavior tracking.
  • Diagnostic logs stay on-device and are never uploaded automatically — they only leave your device if you explicitly tap "Export diagnostic log" and email it to the developer yourself, and they never contain filenames or file content.

2. Data that leaves your device

Other than cloud sync you initiate yourself (see section 3), the app only sends data off-device in the following cases — all of them requests to Apple's own system services, never to the developer:

ScenarioWhat's sentSent toCan it be turned off
Gallery map searchThe place name text you type (never photo coordinates)Apple Maps (MKLocalSearch)Not triggered unless you use the feature
Item detail mini-map snapshotA roughly 1 km region around a photo's capture locationApple Maps (MKMapSnapshotter)Not triggered unless you open the item detail panel
Item detail address lookupThe photo's precise capture coordinatesApple Maps (CLGeocoder reverse geocoding)Happens automatically when you open the detail panel; fails silently offline
Password AutoFill system suggestionsDomain + username of saved logins (never passwords)iOS's own on-device credential index only — no network requestCan be turned off any time in Settings, which also clears the index

All of the above are requests to Apple's own system services and never pass through the developer's infrastructure (because none exists). File content, filenames, and non-location metadata are never included in these requests.

3. Cloud sync (optional)

You can choose to sync your encrypted vault to your own iCloud, Dropbox, or Google Drive account. Sign-in happens directly between your device and Apple's / Dropbox's / Google's own login pages (OAuth2 + PKCE) — credentials never pass through any server operated by the developer. Dropbox access is scoped to an app-specific folder only; Google Drive access is scoped to the hidden appDataFolder that's invisible in your regular Drive — neither can touch the rest of your account. Whichever channel you use, only ciphertext is ever stored in the cloud; neither the developer nor the cloud provider can decrypt it. You can disconnect sync at any time in Settings.

4. Device permissions

  • Camera — used to encrypt a photo straight into your vault, or for live preview during object search (processed entirely on-device).
  • Photo library — used to import the photos/videos you pick via the system picker; the app never reads anything you didn't select.
  • Face ID / biometrics — used only to unlock the vault locally or authorize AutoFill; results are handled by the system Secure Enclave and never leave the device.
  • Location-related access — the app never reads your device's live GPS location; map features use a photo's own embedded capture location metadata, if present. See section 2 for the exact network requests involved.

5. Your choices

Cloud sync, AutoFill, and map-related display are all opt-in features you control in Settings. You can delete your local vault, disconnect sync accounts, or turn off AutoFill at any time. Since the app has no account system and builds no user profile, there's no "export my data" or "delete my account" request to make of the developer — your data only ever lives on your own device and in your own cloud account.

6. Children's privacy

The app is not directed at children under 13 and does not knowingly collect personal information from them.

7. Changes to this policy

If we make a material change to this policy, we'll update the "Last updated" date on this page and note it in the app's About screen. Continuing to use the app after an update means you accept the revised policy.

8. Contact us

Questions about this policy? Email [email protected].