Last updated: 2026-09-15

Hushfold ("the app") is made by Khanh Le ("we", "us"), an independent developer in Vietnam. Contact: khanhlcproductions@gmail.com

The short version

We collect nothing. There are no accounts, no analytics, no advertising, no tracking, and no third-party SDKs of any kind inside the app.
We run no servers. There is no Hushfold backend. We could not receive your data even if we wanted to.
Everything you put in Hushfold is encrypted on your iPhone with a key derived from your master password. We never see your password, your key or your files.
Optional backup goes to your own iCloud, not to us. It uses your iCloud storage and stays inside your Apple account.

Data we collect

None. Apple's App Privacy label for Hushfold is "Data Not Collected", and that is literal.

We do not collect your name, email address, phone number, contacts, location, advertising identifiers, device identifiers, purchase history or usage analytics. The feature counters shown in Settings → Diagnostics are computed on your device, stay on your device, and are never transmitted.

We do not sell, share or rent data. We could not: we hold none.

What stays on your device

Your vault and everything in it, your encryption key, your PIN, your recovery phrase and all settings. Face ID is handled entirely by iOS — the app is only told yes or no, and never sees biometric data.

On-device features that never contact us: text recognition in images (Apple's Vision framework), video compression, the decoy vault, disguise screens and alternate app icons.

The three things that leave your phone

Everything else stays put. These are the only exceptions, and none of them goes to us:

iCloud backup — only if you turn it on. Encrypted copies of your vault are written to a private CloudKit database inside your own Apple account. It counts against your iCloud storage, not ours. Apple stores ciphertext; the key stays on your device, wrapped by your master password. We have no access to this data and no way to request it. Off by default.
Files you export yourself. When you export an encrypted archive or save an item back to Photos, it goes where you send it.
A website icon when you save a link. To show a recognisable icon next to a saved link, the app requests that site's icon directly from that website. The site therefore sees your IP address and the time of the request, exactly as if you had opened the page in a browser. It never passes through us, and no other information is sent. This happens only when you save a link.

Third-party services

Apple — App Store purchases (StoreKit), Face ID, iCloud/CloudKit for optional backup, and crash reports if you enabled sharing with developers in iOS Settings. https://www.apple.com/legal/privacy/
Nothing else. There are no analytics, advertising, attribution or crash-reporting SDKs in the app, and no other company receives anything.

Purchases

Hushfold Unlimited is a one-time purchase. It does not renew and there is no subscription. Payment is processed by Apple; we never see your payment details. Apple tells the app only whether the purchase exists. Refunds are handled by Apple at https://reportaproblem.apple.com

Viewing, exporting and deleting your own data never requires a purchase, including items saved before you reached the free limit.

Data retention & deletion

On your device: deleting the app deletes the vault with it.
In your iCloud: turn off backup in Settings → Backup & restore; the app asks whether to delete the copy in iCloud or leave it as a recovery route. You can also remove it yourself from iOS Settings → Apple Account → iCloud → Manage Storage.
With us: nothing, because we store nothing.

If you lose both your master password and your recovery phrase, nobody can decrypt your data — including us. That is the design, not a limitation.

Your rights (GDPR / CCPA)

We hold no personal data about you, so there is nothing for us to look up, export, correct or delete on your behalf; you already hold and control all of it. For any question, email khanhlcproductions@gmail.com

We do not sell or share personal information as defined by the CCPA, and we have never done so.

Children

Hushfold is rated 4+ and is not directed at children. We do not knowingly collect data from anyone, children included.

Changes

Any change is posted at this URL with the date above updated.