Privacy Policy
This Privacy Policy explains how Locked Album (“the App”) handles information. The App is operated by Li Zhuang. Registered address: No. 158, Minxing North Second Road, Erxianqiao Street, Chenghua District, Chengdu, Sichuan, People’s Republic of China. For questions, comments, or requests about this Policy, contact us using the details in Section 12.
1. What this App does
Locked Album is a camera and an encrypted album on your device. Photos and videos you take or import are saved in an encrypted vault on that device. They are not uploaded to our servers. The vault is excluded from iCloud backup. Each device has its own vault. There is no cloud library and no sync between devices.
This version has no subscription, no in-app purchase, and no Sign in with Apple.
2. Information that stays on your device
The following stays on the device and is not sent to us:
- Photos and videos in the vault, including items you take with the camera or import from the system library;
- The vault passphrase and the keys derived from it. We cannot read the vault and we cannot recover a forgotten passphrase by email or by any other means;
- Face ID or Touch ID. The system uses it only to unlock a key stored in the Keychain. The App does not receive face geometry, fingerprints, or a face template;
- Optional full metadata you choose to keep when importing, such as capture time or location. That metadata stays inside the on-device file. Capture time can still be used to infer where you have been if someone later obtains the file.
You can export a copy to the system photo library only when you choose to. Export is a write you start. It is not an upload to us.
3. Information we receive
Sign-in is optional. You can use the camera, the vault, import, and export without an account. If you sign in with email, we receive:
| Data | When | Why | Where it is stored |
|---|---|---|---|
| Email address | You request a sign-in code or sign in | Send a one-time code and identify the account | Our account service on Cloudflare |
| User ID | After the code is verified | Identify the account | Our account service on Cloudflare, and on the device |
| Session token | After the code is verified | Keep you signed in until you sign out or delete the account | Hashed on our account service; the token is also stored in the device Keychain |
The sign-in code is emailed from noreply@streakbound.uk. We store a hash of the code, not the code itself, and only until it expires or is used.
Signing in does not upload photos or videos. It does not sync the vault. It cannot restore a lost passphrase.
We do not collect product analytics, advertising identifiers, or crash reports. We do not sell personal information and we do not track you across other companies’ apps or websites.
4. Permissions
The App asks the system for permission only for these uses:
- Camera: to take photos and videos. They are saved only in the on-device vault.
- Microphone: while recording video.
- Photo library additions: to write a photo or video to the system library only when you export it.
- Photo library selection: to let you choose items to import. The App does not need full library access for that choice.
- Face ID: to unlock the vault key stored in the Keychain, if you turn that on.
5. Why we use account information
We use the email, user ID, and session only to:
- Send the sign-in code and complete sign-in;
- Show the signed-in email in Settings;
- Sign you out;
- Delete the account when you ask;
- Reply to a support, privacy, or deletion request you send us.
6. Third parties
| Third party | Purpose | Typical data | Location (summary) |
|---|---|---|---|
| Apple (camera, microphone, photo library, Face ID, Keychain) | Capture, import, export, and on-device unlock | Processed on your device under Apple’s systems. We do not receive face data. | On your device, per Apple’s privacy policy |
| Cloudflare (Workers, D1) | Account service: sign-in codes, sessions, and account deletion | Email, user ID, hashed session token, hashed sign-in code | Cloudflare’s global network |
Verification email is sent from noreply@streakbound.uk through the account service. Photos, videos, the vault passphrase, and face data are not included.
7. Sharing and disclosure
We do not sell your personal information. We may share account information only:
- With your direction, such as when you request a sign-in code or ask us to delete the account;
- With Cloudflare, as described in Section 6, to run the account service and send the code;
- To comply with applicable law, regulation, legal process, or a competent authority;
- To the extent reasonably necessary to protect our rights, property, or safety, or those of our users or the public.
8. Your rights
Depending on where you live, you may have rights in your personal information. We aim to support the following:
- Access and correction: the signed-in email is shown in Settings. To use a different email, sign out and sign in with that address.
- Data export: you may email us and request a copy of server-side data linked to your account (email and user ID) in a commonly used electronic format. Photos and videos in the vault must be exported by you with the in-app export action. We cannot export them for you, because we do not have them.
- Account deletion: if you are signed in, open Settings → Account → Delete account. After you confirm, we delete the server-side account, sign-in codes, and sessions. Deleting the account does not erase the encrypted vault on the device. To erase the vault, use Settings → Vault → Delete on-device vault. If you cannot use the in-app flow, email the address in Section 12. We will handle a verifiable request within 30 days.
- The vault passphrase cannot be reset from the account. If you still know the current passphrase, you can change it under Settings → Change passphrase.
9. Children’s privacy
The App is not directed to children under 13 (or a higher age required where you live). We do not knowingly collect children’s personal information, and we do not market to children. The suggested age rating is 17+ because the vault can hold private photos and videos. If you are a parent or guardian and believe your child provided personal information, contact us using Section 12. We will delete related server-side information promptly.
10. Security, retention, and international transfers
Photos and videos in the vault are encrypted on the device with AES-256-GCM. The vault is excluded from iCloud backup. A forgotten passphrase cannot be recovered by us.
We keep account information only as long as needed:
- On-device vault files: kept until you delete them or delete the vault. Uninstalling the App removes the app sandbox on that device. A passphrase we never received cannot be restored after that.
- Server-side account data, codes, and sessions: deleted when you delete the account in the App, or within 30 days after a verified email request, unless a longer period is required by law.
Account data may be processed on Cloudflare’s global network, which can be outside the country or region where you live. We take reasonable steps required by applicable law. Internet transmission is not guaranteed to be fully secure.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The updated Policy applies from the Last updated date at the top of this page. Please review this Policy periodically. The current text is published at this URL.
12. Contact us
For questions, comments, or requests about this Policy, our handling of your information, or your rights (including a copy of account data and account deletion), contact:
Email: streakbound@zohomail.com
Operator: Li Zhuang
Registered address: No. 158, Minxing North Second Road, Erxianqiao Street, Chenghua District, Chengdu, Sichuan, People’s Republic of China