Privacy Policy

Last updated: October 7, 2026

AmberHush is an encrypted photo vault for iPhone and iPad, made by an independent developer (“we”). It is built so that we never receive your photos or any other data about you. This policy explains what that means for the app and for this website.

In short

• We don’t collect, sell or share personal data.
• There’s no account, advertising, analytics or tracking.
• Your photos are encrypted on your device and leave it only when you share them or back them up.
• We don’t have your passwords, recovery code or keys, so we can’t open your vault or recover it for you.

The AmberHush app

What we collect

Nothing. The app contains no analytics, advertising or crash-reporting services and doesn’t contact any server run by us. We don’t run any.

What the app stores on your device

• Your vault: photos, videos, thumbnails, albums and their details, all encrypted (see how AmberHush protects your photos).
• Keys: your vault’s private key, encrypted with your master password or, in Face ID mode, with a random password kept only in this device’s Keychain.
• Settings: choices such as language and camera options.
• Diagnostic reports: reports about freezes and crashes that iOS provides to the app, kept in the app’s own storage (up to 20) and excluded from device backups. They contain technical details, never your photos, and the app never sends them anywhere.

Permissions

The app asks for each permission only when you use the feature that needs it.

Permission	What it’s used for
Photos	Reading the original files of the photos and videos you add, deleting the originals when you confirm, and saving items you share back to your library.
Camera	Taking photos and videos with the secure camera, straight into the vault.
Microphone	Recording sound for Live Photos and videos taken in the vault.
Location	Only if you turn on Record Location in Settings › Camera: adding where a photo was taken. The location is stored encrypted with the photo.
Face ID	Unlocking the vault. iOS checks your face; the app never receives face data.

When data leaves your device

Only when you choose:

• Sharing: when you share a photo or video, a decrypted copy goes to the app you pick. Location data is removed by default.
• Backups: encrypted copies go to the drive or folder you choose. If that’s a cloud folder such as iCloud Drive, its provider stores the encrypted files under its own terms.
• Include in iPhone Backup (off by default): the encrypted vault becomes part of your iPhone backup in iCloud or on your computer.
• Maps and Place Names (off by default): when on, viewing a photo that has a location sends its approximate coordinates to Apple to show a map and the place name. The photo itself is never sent. Apple’s privacy policy applies.
• Purchases: the App Store handles AmberHush Pro purchases and subscriptions. We don’t receive your name, email address or payment details.
• Feedback: Settings › About › Send Feedback opens your email app with the app version, iPhone model and iOS version filled in. Nothing is sent until you send the email, and you can delete those lines first.
• Copying your recovery code: the copy stays on this device only, not on your other devices, and is cleared after 60 seconds.

Information from Apple

Apple gives developers aggregated App Store statistics such as downloads and sales. If you chose to share analytics with app developers in your device settings, Apple may also give us crash reports and usage statistics. None of this identifies you or includes your photos. You can change this in Settings › Privacy & Security › Analytics & Improvements.

Children

We don’t collect data from anyone, including children.

Keeping and deleting data

Your data stays on your device until you delete it. Deleting the app deletes the vault on that device. Backups you made stay where you put them until you delete them; because backups only add, photos you delete from the vault remain in backups that already contain them.

Your rights

Because we hold no personal data about you, there’s nothing for us to access, correct, export or delete: everything is on your device and under your control. If you have a question or a request under the data protection laws that apply to you, contact us and we’ll answer.

This website

amberhush.app uses no cookies, analytics, advertising, or fonts or scripts from other companies. It’s hosted by Cloudflare, which processes technical data such as IP addresses to deliver the site and protect it from abuse; we don’t use that data to identify visitors. If you email us, we use your message and email address only to reply.

Changes to this policy

If this policy changes, we’ll post the new version here with a new date. If a change affects what the app does with your data, we’ll also say so in the app’s release notes.

Contact

Questions about this policy:

support@amberhush.app