1. Introduction

Welcome to Crypted Gallery. Your privacy is fundamentally important to us. This Privacy Policy explains how we handle your data when you use our encrypted photo and video gallery application.

2. Data We Collect

2.1 Data We DON'T Collect

• ❌ Your photos or videos (encrypted or unencrypted)
• ❌ Your encryption password or keys
• ❌ Personal information (name, email, phone number)
• ❌ Location data or GPS information
• ❌ Browsing history or usage analytics
• ❌ Device identifiers or advertising IDs

2.2 Minimal Technical Data

To ensure the app functions properly, we may collect minimal technical information:

• App Version: To provide appropriate updates
• Crash Reports: Only if you opt-in, to improve stability
• Error Logs: Anonymous technical logs for debugging (no personal data)

3. Encryption & Security

3.1 How Encryption Works

1. Password-Based Encryption: Your encryption key is derived from your password using PBKDF2 with multiple iterations
2. Local Encryption: All files are encrypted on your device before any storage or sync
3. Zero-Knowledge Architecture: Your password never leaves your device, and we never have access to your encryption keys
4. Secure Key Storage: Encryption keys are stored in Android's secure KeyStore

3.2 Security Features

• End-to-end encryption for all files
• Automatic app lock after inactivity
• Password protection with secure key derivation
• No backdoors or master keys

4. Data Storage

4.1 Local Storage

All your encrypted files are stored in your device's private app directory:

• Files are stored in encrypted format only
• No unencrypted copies are retained
• Original files are securely deleted after encryption
• Storage is isolated from other apps

4.2 App Data

We store minimal app configuration data locally:

• App settings and preferences
• Album organization metadata (encrypted)
• Thumbnail cache (encrypted)

5. Google Drive Integration

5.1 Optional Cloud Backup

Crypted Gallery offers optional automatic backup to your Google Drive:

5.2 Google Drive Permissions

When you enable Google Drive sync, we request:

• Drive.File scope: Access only to files created by Crypted Gallery
• We cannot access other files in your Google Drive
• You can revoke access anytime from your Google Account settings

5.3 Google's Privacy Policy

For data stored on Google Drive, Google's Privacy Policy applies. However, since files are encrypted, Google cannot read your content. Learn more at: Google Privacy Policy

6. App Permissions

6.1 Required Permissions

7. Third-Party Services

7.1 Services We Use

• Google Drive API: For optional cloud backup (only if you enable it)
• Google Play Services: For app distribution and updates

7.2 Services We DON'T Use

• ❌ No advertising networks
• ❌ No analytics or tracking services
• ❌ No social media integrations
• ❌ No data brokers or third-party data sharing

8. Your Data Rights

8.1 You Have Complete Control

• Access: All your data is stored locally on your device and in your Google Drive
• Export: You can decrypt and export your files anytime
• Delete: You can delete files or uninstall the app to remove all data
• Portability: Export your files in their original unencrypted format

8.2 Password Management

• Change your password anytime (automatic re-encryption of all files)
• Important: If you forget your password, we cannot recover your files (by design for security)
• No password recovery or reset option (zero-knowledge architecture)

9. Children's Privacy

Crypted Gallery does not knowingly collect any personal information from children under 13. The app is not directed at children, and we do not collect any data that would allow us to determine the age of our users.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of significant changes through:

• App update notifications
• In-app announcements
• Updated "Last Modified" date at the top of this policy

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: