Privacy Policy
On-device data processing
Personal File Library saves photos, videos, and documents on your device. The app does not create online accounts or upload files, filenames, or passcodes to developer servers. It includes no advertising, third-party analytics, or tracking SDKs. The developer cannot remotely view your files or recover your passcodes.
Three independent libraries
The app opens directly into the public library. Anyone who can open the app can view its contents. Two different passcodes each open a separate encrypted library. The public library's local storage key is not protected by an app passcode; the other two libraries' keys are protected by their respective passcodes. Content is not automatically shared between libraries.
Photo and file permissions
The app reads photos, videos, and documents only when you choose them for import. When you restore media to Photos, the app requests permission to add to your photo library. Denying this permission does not affect files already stored in the app. The app does not request access to your contacts, location, microphone, or camera.
Importing, restoring, and deleting
Import creates a local copy without deleting the source file. Restore creates a copy in Photos or a location you choose that is not protected by the app passcode; the in-app copy is kept. Confirming deletion removes only the selected items from the current library, with no trash or undo. The app has no registered server accounts or server-account deletion process.
Local encryption and temporary files
Encrypted libraries use AES-GCM provided by Apple, with PBKDF2-based key derivation for passcodes. Photos are decrypted for display in memory. Video playback, document preview, and file restoration create temporary plaintext files in the app's private directory under system file protection. These are cleaned up when you leave, lock the library, or finish the operation; files left after an abnormal exit are cleaned up on the next launch. A six-digit passcode cannot guarantee protection against professional forensic analysis or offline guessing.
System services and network boundaries
Library features do not initiate network connections and do not provide cloud sync. System Photos and Files pickers may show iCloud or third-party cloud content. If you choose a cloud location for an encrypted backup, the system provider may upload or download that encrypted file. Choosing a cloud original may cause the system to download it, and restored copies in Photos or cloud storage may be synced by the system. Opening external support links or sending support email uses the relevant system app and may access the network. Those services have their own privacy policies.
Retention and data loss
Library content remains until you delete it or delete the app. The library directory is marked for exclusion from system backups. You can manually export the current library as a password-encrypted backup; there is no automatic backup, developer-hosted recovery, or password recovery. Keep a verified backup and its separate password safely outside this device. Without a usable backup or original, forgetting a passcode, deleting the app, or losing your device may permanently lose files. A backup saved to a cloud provider is synced by that provider, not uploaded to developer servers.
Support and policy updates
If you choose to contact support by email, we use the contact details and issue description you provide to handle your request. Do not send passcodes, private photos, or sensitive files. Updated versions of this policy and their dates will be available in the app and on the public policy page. If network or data-collection features are added in the future, the policy will be updated and consent requested where applicable.