Privacy Policy

Last updated: June 2026

      Privacy by design: Your vault data stays exclusively on your device. GeoLocker has no accounts and no servers, we don’t collect, transmit, or store your content, and there is no analytics or tracking.
    

Information We Do Not Collect

Vault locations, coordinates, or passphrases
Your stored notes, photos, video, audio, or files
Device location or GPS data
Personal identifiers, advertising IDs, or usage analytics

On-Device Storage & Encryption

Everything you store is encrypted with AES-256-GCM and kept only on your device. Biometric vaults use per-vault keys held in the device’s Secure Enclave and released by Face ID / Touch ID. Hidden (deniable) vaults derive their key from a map spot plus a passphrase (via Argon2id) and a device-bound secret. Data is kept in the device-only iOS Keychain and the app’s local storage; it is not synced to any cloud and is not included in transferable device backups.

Location Usage

Location is used only when you explicitly create or unlock a vault. For hidden vaults the spot is an input to the encryption key and is never stored. For biometric vaults, coordinates are encrypted on the device. Location data is never transmitted off the device.

In-App Purchases

GeoLocker is free. The only optional purchase is a one-time “Supporter” tip, processed entirely by Apple through the App Store. Apple handles that transaction under Apple’s privacy policy; we receive only an anonymous indication that the purchase exists, never your name, email, or payment details. The tip unlocks a cosmetic badge and nothing else.

Network & Third Parties

The app’s core security works fully offline. It contacts the network only for the optional App Store purchase above. There are no third-party analytics, advertising, tracking SDKs, or data brokers in the app.

This Website

This website (geolocker.app) is served through Cloudflare, which may process standard request information such as your IP address to deliver and protect the site; we do not use tracking cookies. If you use the contact form, it is protected by Cloudflare Turnstile and the message you submit is emailed to us so we can reply, we use it only for that purpose.

Data Deletion

You control deletion of individual items, entire vaults (including an irreversible wipe of all hidden vaults), or the whole app. Uninstalling removes all on-device data.

Our commitment: Your vault contents never leave your device. This is fundamental to how GeoLocker is built.