LockX – Privacy Policy

Hasibullah Mohmand  ·  Effective Date: August 13, 2026

LockX ("the app", "we", "our") is a private photo vault app developed by Hasibullah Mohmand. Your privacy is the entire point of this product. This policy explains exactly what data the app accesses, how it is used, and what we never do with it.

1. Data We Collect

We do not collect, transmit, or store any personal data on our servers. The app has no backend server. All data stays on your device or in your personal iCloud account.

2. Photos & Videos

When you import a photo or video into LockX, it is immediately encrypted on your device using AES-256-GCM. The encryption key is generated on your device, stored only in your device's Keychain, and never transmitted anywhere. We cannot see, access, or recover your photos under any circumstances.

• Photos are read from your library only when you explicitly choose to import them.
• Photos can be saved back to your library only when you explicitly choose to export them.
• We never scan, analyze, or upload your photo library in the background.

3. iCloud Backup (Premium Feature)

If you subscribe to a paid plan and enable Cloud Vault backup, your photos are encrypted on your device before being uploaded to your personal iCloud account via CloudKit. Only you hold the encryption key — not Apple, not Hasibullah Mohmand. Your iCloud storage is used; we do not operate any cloud storage ourselves.

4. Camera Access

The camera is used for two optional features:

• Direct capture: Taking a photo into the vault without saving it to your regular camera roll.
• Break-in Report: If enabled, silently photographs whoever is holding the phone after repeated failed unlock attempts. These photos are encrypted immediately and stored only on your device.

The camera is never accessed in the background and is never used without your knowledge.

5. Face ID / Touch ID

Biometric authentication is handled entirely by iOS (LocalAuthentication framework). We never see your biometric data. Face ID is used only to gate access to the app and to individual albums.

6. Location

Location access is used only if you enable the optional Location-Based Lock feature, which automatically re-locks the app when you leave a designated safe zone. Your location is never stored persistently, never transmitted, and is discarded as soon as the lock check is complete. Break-in Report photos may include approximate GPS coordinates at time of capture, stored encrypted on your device only.

7. Local Network

Local network access is used only when you manually start Wireless Transfer in Settings, which runs a temporary local HTTP server so a computer on the same Wi-Fi can upload or download photos. This server is never started automatically, never runs in the background, and stops the moment you leave the app.

8. Subscriptions & Payments

All purchases are processed by Apple through the App Store. We do not see, receive, or store your payment card details, Apple ID, or billing information. Purchase history is managed in your Apple ID settings.

9. Analytics & Tracking

LockX contains no third-party analytics, advertising SDKs, or tracking code. We do not use advertising identifiers (IDFA). We do not track you across other apps or websites.

10. Data Sharing

We do not sell, rent, or share your personal data with any third party for any purpose. Ever.

11. Data Retention & Deletion

All your data lives on your device or in your iCloud account. To delete everything, delete the LockX app — your vault photos, encryption keys, and all local data are removed. To remove iCloud backups, delete the LockX data from iCloud Drive in your device settings.

12. Children's Privacy

LockX is not directed at children under 13. We do not knowingly collect any information from children.

13. Changes to This Policy

If we make material changes to this policy, we will update the effective date above and, where appropriate, notify users through the app or the App Store update notes.

Contact