Privacy Policy
Last updated: November 12, 2026
PixCrypt encrypts your photos, videos, documents and notes on your phone: neither ArfTech nor anyone else can see your files. This policy explains the limited technical data we process, why, and your rights.
1. Data controller
ArfTech, owner and developer of the PixCrypt app. Privacy contact: info@pixcrypt.app
2. Your files stay private
Photos, videos, audio, documents and notes are encrypted on the device with AES-256-GCM before they are stored.
The encryption key is protected by the Android Keystore and by your account password. Your password never leaves the phone: the server only receives a derived code that cannot be turned back into the password.
The app's database (file and album names, dates) is encrypted on the phone too, with SQLCipher.
ArfTech does not receive, see or decrypt your files, notes or thumbnails.
If you lose your password, we cannot recover your files for you.
3. Data we process
Data | Purpose | Legal basis |
|---|---|---|
Account email | Sign-in, password reset, service messages | Contract |
Code derived from the password, encrypted copy of the key and, if you create a recovery key, a second encrypted copy that only that key can open | Sign-in and restoring files on a new phone | Contract |
Device details: brand, model, Android and app version, app-generated identifier | Support, compatibility, device limit of the plan | Legitimate interest |
Country (from SIM, network or phone language) | Aggregate statistics and local pricing | Legitimate interest |
Number of files per type and storage used (never content or file names) | Plan limits and statistics | Contract |
Backup status (on/off, date of last backup) | Support | Legitimate interest |
Active plan and Google Play purchase data | Activating and verifying the subscription | Contract |
Messages sent to support, with app version, Android version and model | Answering your requests | Contract |
Messages sent through the website contact form: email, topic, subject and text | Answering your requests (the message reaches us by email and is kept for support) | Legitimate interest and pre-contractual steps |
App integrity checks: whether the app is the original from Google Play and whether it is being modified while it runs (Google Play Integrity verdict and on-device checks) | Preventing fraud and misuse of the service | Legitimate interest |
Sign-up date and last access | Security and account management | Legitimate interest |
We show no ads, sell no data and use no third-party profiling or analytics tools.
4. Data that stays on your phone
The intruder photo taken after wrong unlock attempts.
The app's error log, viewable in Settings. Only with your consent, after a crash a technical report is sent (app and Android version, phone model, code location), stripped of paths, file names and emails. You can withdraw consent in Settings.
PIN, emergency code and settings (codes are stored only as an Argon2id fingerprint).
The recovery folder, if you turn it on: encrypted copies of your files in the phone's Documents folder.
If you choose “Open another app” for quick escape, the list of installed apps is read on the phone only so you can pick one. It is never sent anywhere.
5. Third-party services
Supabase: hosts accounts, profiles and support messages, with encryption in transit and at rest.
Google Play: handles payments and subscriptions. ArfTech only receives the purchase status, never card details. Google Play Integrity confirms that the app is the original one installed from Google Play.
Google Drive (optional): if you turn on backup, files are uploaded already encrypted to your own Google Drive. The app only accesses files it creates.
Dropbox (optional): as an alternative to Google Drive, files are uploaded already encrypted, with anonymous names, to an app folder in your own Dropbox. The app only accesses that folder and reads the account email to show you which one is connected.
Resend: sends account emails (confirmation, password reset) and forwards contact-form messages to us.
Each service processes data under its own policy. Any transfer outside the EU uses GDPR safeguards such as standard contractual clauses.
6. Phone permissions
Photos, videos and files: to import the files you hide and, if you ask, remove the originals from the gallery. On Android 11 and later, "All files access" is used to encrypt files and folders of any type, delete originals without confirmations and keep the recovery folder. The app only touches the files you choose and never uploads them.
Camera: for the secret camera, the intruder photo and reading the QR code in phone-to-phone transfer.
Microphone: for the secret recorder and video audio.
Internet and local network: for account, backup, purchases and support; phone-to-phone transfer only uses your Wi-Fi network, directly between the two devices, never through our servers.
Each permission is used only for the feature listed.
7. Retention
Account data is kept as long as the account exists.
If you delete your account (in the app or on the account deletion web page), we delete your profile, devices and support messages. Technical backups are cleared within 30 days.
Files on your phone and in your Google Drive or Dropbox are under your control and you can delete them at any time.
8. Your rights
You can request access, correction, deletion, restriction and portability, and object to processing based on legitimate interest. Write to info@pixcrypt.app: we reply within 30 days. You can also lodge a complaint with the data protection authority of the country where you live or work.
9. Children
PixCrypt is intended for adults and is not directed at anyone under 18. If we learn that a minor has created an account, we delete it.
10. Security
We use encrypted connections (HTTPS), row-level access rules on the database and on-device encryption. No system is 100% secure, but with the zero-knowledge design even unauthorized access to our servers would not reveal your files.
11. Changes
If we change this policy, we update the date above and, for important changes, notify you in the app.