Last updated: 2026-09-15

Hushfold ("the app") is made by an independent developer in Vietnam ("we", "us"). Contact: support@hushfold.app

The short version

We collect nothing. There are no accounts, no analytics, no advertising, no tracking, and no third-party SDKs of any kind inside the app.
We run no servers. There is no Hushfold backend. We could not receive your data even if we wanted to.
Everything you put in Hushfold is encrypted on your iPhone with a key derived from your master password. We never see your password, your key or your files.
Optional backup goes to your own iCloud, not to us. It uses your iCloud storage and stays inside your Apple account.

Data we collect

None. Apple's App Privacy label for Hushfold is "Data Not Collected", and that is literal.

We do not collect your name, email address, phone number, contacts, location, advertising identifiers, device identifiers, purchase history or usage analytics. The feature counters shown in Settings → Diagnostics are computed on your device, stay on your device, and are never transmitted.

We do not sell, share or rent data. We could not: we hold none.

What stays on your device

Your vault and everything in it, your encryption key, your PIN, your recovery phrase and all settings. Face ID is handled entirely by iOS — the app is only told yes or no, and never sees biometric data.

On-device features that never contact us: text recognition in images (Apple's Vision framework), video compression, the decoy vault, disguise screens and alternate app icons.

The three things that leave your phone

Everything else stays put. These are the only exceptions, and none of them goes to us:

iCloud backup — only if you turn it on. Encrypted copies of your vault are written to a private CloudKit database inside your own Apple account. It counts against your iCloud storage, not ours. Apple stores ciphertext; the key stays on your device, wrapped by your master password. We have no access to this data and no way to request it. Off by default.
Files you export yourself. When you export an encrypted archive or save an item back to Photos, it goes where you send it.
A preview when you save a link. To show a title and a thumbnail next to a saved link, the app asks the linked site itself — never us, and never a middleman. For a YouTube, TikTok, Vimeo or SoundCloud link it calls that platform's public oEmbed endpoint and sends it the link you saved; for anything else it fetches the page's own icon and title. Either way that site sees your IP address, the address you saved and the time — exactly what it would see if you had opened the link in a browser, and nothing more. No identifier of yours is attached, no SDK is involved, and nothing about your vault is included. This happens only at the moment you save a link, and only for links; photos, videos, files and notes never touch the network.

Third-party services

Apple — App Store purchases (StoreKit), Face ID, iCloud/CloudKit for optional backup, and crash reports if you enabled sharing with developers in iOS Settings. https://www.apple.com/legal/privacy/
Nothing else. There are no analytics, advertising, attribution or crash-reporting SDKs in the app, and no other company receives anything.

Purchases

Hushfold Unlimited is sold three ways, and all three unlock exactly the same thing. Yearly (US $24.99 a year, after a 7-day free trial) and Weekly (US $2.99 a week) are auto-renewable subscriptions: they renew until you cancel them in Settings → Apple Account → Subscriptions, at least 24 hours before the period ends. Lifetime (US $34.99) is a single payment that never renews and has nothing to cancel. Prices vary by region and are shown in the app before you buy.

Payment is processed by Apple; we never see your payment details. Apple tells the app only whether an entitlement exists — not who you are, what you paid, or when. Refunds are handled by Apple at https://reportaproblem.apple.com

Viewing, exporting and deleting your own data never requires a purchase, including items saved before you reached the free limit.

Data retention & deletion

On your device: deleting the app deletes the vault with it.
In your iCloud: turn off backup in Settings → Backup & restore; the app asks whether to delete the copy in iCloud or leave it as a recovery route. You can also remove it yourself from iOS Settings → Apple Account → iCloud → Manage Storage.
With us: nothing, because we store nothing.

If you lose both your master password and your recovery phrase, nobody can decrypt your data — including us. That is the design, not a limitation.

Your rights (GDPR / CCPA)

We hold no personal data about you, so there is nothing for us to look up, export, correct or delete on your behalf; you already hold and control all of it. For any question, email support@hushfold.app

We do not sell or share personal information as defined by the CCPA, and we have never done so.

Children

Hushfold is rated 4+ and is not directed at children. We do not knowingly collect data from anyone, children included.

Changes

Any change is posted at this URL with the date above updated.

This website

Everything above describes the app. This page you are reading is a website, and it is worth being precise about the difference.

hushfold.app counts page views and clicks on the download and waitlist buttons, using Vercel Web Analytics. It is served from this domain, sets no cookies, and stores no identifier that could follow you to another site or back here tomorrow. We see totals — "this page was viewed 40 times" — not people. It runs for everyone and there is nothing to opt into.

There is no Google Analytics, no advertising pixel, no session recording, and no third-party script of any kind. Nothing here sets a cookie, so there is no consent bar to dismiss.

If you type your address into the waitlist box, it is emailed to us and used once, for one message on launch day, then deleted. Nothing else on this site asks you for anything.

Our host keeps standard server logs, as every web host does; we do not build profiles from them.