What Vaultgram knows, and what it never sees
Vaultgram is a private photo and video vault for iOS. Everything you import is encrypted on your device with AES-256 before it touches disk, and unlocks only with your PIN or Face ID — not a cloud account, not a server, not us. Browse, organize, and search your vault like a normal photo app; the difference is that nobody but you can ever open it.
Effective 26 August 2026Published by Digibumpin.digibump.vaultgramOverviewWhat’s stored, and whereOptional cloud featuresPermissions & whyWhat we don’t doChildren’s privacyYour choicesChanges to this policyContact
§1
Overview
Vaultgram is built so that your photos and videos never leave your device unless you explicitly choose to send them somewhere — and even then, they go straight to a cloud account that belongs to you, never to us.
This policy applies to the Vaultgram iOS app (bundle identifier in.digibump.vaultgram), published by Digibump. We don’t have servers that store your media, we don’t run analytics, and we don’t show ads. Everything below explains exactly what that means and why you should still read it rather than take our word for it.
§2
What’s stored, and where
Your photos and videos
When you import a photo or video into Vaultgram, it is encrypted on your device with AES-256-GCM before it is written to disk, using a key that is itself protected by your PIN or your device’s Face ID / Touch ID. The encrypted files live only in Vaultgram’s private storage on your device. We do not have a server, so we never receive, see, or store a copy of your media — there is nowhere for us to receive it.
Your PIN and biometric setup
Your PIN is never stored in readable form; it’s used to derive an encryption key via Argon2id and immediately discarded. Face ID / Touch ID authentication is handled entirely by iOS’s own Keychain and Secure Enclave — Vaultgram never sees your biometric data itself, only a yes/no result from the operating system.
App settings and metadata
Album names, sort order, and which optional features you’ve turned on are stored locally on your device in Vaultgram’s own database, encrypted the same way as your media.
Recently Deleted
Deleting a photo or video moves it to an in-app “Recently Deleted” area for 30 days before the underlying encrypted files are permanently erased, giving you a window to recover an accidental deletion. Nothing in this window is transmitted anywhere either.
§3
Optional cloud features
Both of the following are off by default. Vaultgram works fully as a private, offline vault without ever turning them on.
iCloud Sync
If you turn this on, Vaultgram uses Apple’s CloudKit to sync your encrypted vault across your own devices signed into the same iCloud account. This data is stored in your private CloudKit database — a space Apple allocates to your iCloud account, not to us. We have no access to your CloudKit data and no way to read it even if we wanted to, since it stays encrypted. Apple’s own privacy policy governs their infrastructure; ours does not extend to it.
Google Photos Backup
If you turn this on, Vaultgram asks you to sign in to your Google account using Google Sign-In — an OAuth 2.0 flow presented directly by Google inside a system browser session, so Vaultgram never sees your Google password. Once authorized, Vaultgram uploads your photos directly from your device to your own Google Photos library, using a narrow “append only” permission scope that lets it add new photos but never read, modify, or delete anything already there. This connection runs directly between your device and Google; Vaultgram’s developer has no server in this path and never receives your photos, your Google credentials, or your Google account information at any point.
Google API Services User Data Policy disclosure. Vaultgram’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Vaultgram only uses the Google Photos access it’s granted to upload photos you select, for backing them up to your own library; it does not use this access for advertising, does not allow humans to read this data except with your explicit permission for support purposes, and does not transfer this data to any third party.
You can revoke Vaultgram’s access at any time from its own Settings (Disconnect) or from your Google Account permissions page.
§4
Permissions, and why
- Photo Library — to import photos/videos you select into your vault, and, only if you choose, to export them back out or delete originals after import.
- Camera — for the in-app camera and document scanner, so you can capture directly into your vault without the photo ever touching your regular Photos library; and, only if you turn on the optional break-in log, to capture a photo after repeated failed PIN attempts. Off by default, and never silent — iOS’s normal shutter sound always plays.
- Microphone — only used if you record video with audio through the in-app camera.
- Face ID — to unlock your vault, handled entirely on-device by iOS.
None of the above ever transmits data to us. Every permission is used strictly on-device, except the two optional backup features above, each of which sends data only to a cloud account that belongs to you.
§5
What we don’t do
- We don’t run analytics or crash-reporting SDKs that phone home with your data.
- We don’t include third-party advertising SDKs, and we don’t show ads.
- We don’t sell, rent, or share your data with anyone, because we never have a copy of it to share.
- We don’t have a server-side account system — there’s no username or password of ours to leak, because there’s no backend.
§6
Children’s privacy
Vaultgram is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children, consistent with there being no data collection by us at all. If you believe a child has used Vaultgram in a way that concerns you, contact us below.
§7
Your choices and control
Because your data lives on your device, you control it directly:
- Delete any photo or video at any time, with a 30-day Recently Deleted safety window.
- Turn iCloud Sync or Google Photos Backup on or off at any time in Settings.
- Disconnect Google Photos Backup and revoke its access whenever you like.
- Uninstalling Vaultgram removes its on-device data, subject to any copy you’ve separately placed in your own iCloud or Google Photos account through the optional features above, which you control there.
§8
Changes to this policy
If we change this policy, we’ll update the effective date at the top of this page and, for material changes, make a reasonable effort to surface that in the app itself. Continued use of Vaultgram after a change means you accept the updated policy.
§9
Contact
Questions, concerns, or requests about this policy or your data: