プライバシーポリシー

Overview

This Privacy Policy explains how an individual developer provides Veil Photo, a photo app for iPhone with Android coming soon, and this marketing website at veil.otterspark.xyz. It should be reviewed for your specific legal needs before relying on it as a final production policy. Questions: support@otterspark.xyz.

What Veil Photo does with media

• Gallery browsing uses the on-device photo library you grant. On iPhone this is the Apple Photos library, with limited or full access. Purpose copy is shown before access is requested. The Android version will use the device photo library available on that platform.
• Private vault media is stored as files on the device, with related metadata in on-device storage. Gallery and search do not fetch vault media.
• Format conversion and metadata masking run on the device. Originals are kept by default. Cleaned or converted copies are written only when you save them.
• Private media, vault names, item counts, thumbnails, and PINs are not uploaded to the developer or to a cloud service operated by the app.

Information we collect

• We do not collect analytics identifiers, usage events, advertising IDs, or crash telemetry through an analytics or tracking SDK.
• If you email support, we receive whatever you choose to send, such as your email address, device details, and a description of the issue.
• Apple processes App Store purchases and restorations on iPhone. We may receive entitlement status and product identifiers through StoreKit. When the Android app ships, Google Play will process those purchases. We do not receive full payment card numbers.

PINs, biometrics, and permissions

• Each vault PIN and the master PIN are six digits. On iPhone, raw PINs live only in the device Keychain with WhenUnlockedThisDeviceOnly accessibility and are not synced. The Android version will keep raw PINs in on-device secure storage and will not upload them.
• PINs are never stored in app databases, files, analytics, or error text.
• After the sixth PIN digit, the iPhone app requests iOS owner authentication (Face ID, Touch ID, then device passcode). The Android version will request the platform owner authentication available on that device. Biometric data stays with the platform and the device. The app only receives success or failure.
• Photo-library access can be limited or full where the platform allows. If you later revoke access or change the limited set, existing vault files on disk are not deleted by that change.

This website

This marketing site is static. It does not load Google Analytics, advertising tags, or a behavioral analytics SDK. Server logs, if any, are those of the static host and are not used to profile visitors in the app.

Sharing

We do not sell personal information. We do not share private media. Apple processes iPhone payments under Apple terms. Google will process Android payments under Google Play terms when that listing is available. Email you send to support is used only to respond and to keep a record of the request.

International transfers

The app is designed so private media stays on the device. Support email you send may be processed where the developer reads mail. Apple and, when Android ships, Google may process purchase data in the countries where those stores operate.

Retention

• Vault media remains on the device until you export it, delete the item, delete the vault, or remove the app.
• Deleting a vault permanently deletes its media after explicit confirmation and a fresh owner authentication.
• Support email is kept as long as needed to resolve the request and protect legal rights.
• Purchase records Apple or Google provide may be kept as needed to restore entitlements and meet tax or legal duties.

Children

We do not knowingly collect personal information from children under 13, or a higher age where local law requires parental consent. If you believe a child provided personal information by email, contact support@otterspark.xyz and we will take reasonable steps to delete it.

Your choices and rights

• Control photo-library access, biometrics, and device lock in system settings.
• Export or delete private items from an authenticated vault. Delete a vault to remove its media.
• Manage purchases, cancellations, and refunds in your Apple ID settings or, when available, your Google Play account.
• Contact support@otterspark.xyz to request access, correction, deletion, or other rights that apply in your region. We may need to verify the request and may limit it where the law allows, including when we do not hold the data you ask about because it never left the device.

Changes

We may update this Privacy Policy from time to time. Continued use of the app after an update means you acknowledge the updated policy, except where law requires another form of notice or consent.

Contact

For privacy questions or rights requests, email support@otterspark.xyz.