XtraSafe Privacy Policy

Last updated: 24 July 2026

XtraSafe is designed to protect private media on your device. The app does not upload your photos, videos, thumbnails, detection results, or vault keys. Detection and encryption happen on-device.

Data we collect

None. XtraSafe Photo Vault does not collect, transmit, sell, or share any personal data. The app requires no account, contains no analytics or advertising SDKs, and sends no usage data to us or to third parties.

How your media is handled

• Scanning runs entirely on your iPhone using an on-device detection model. Your photos and videos are never sent anywhere to be analysed.
• Vaulted items are encrypted on your device with keys protected by your PIN, Face ID, and the device's Secure Enclave. Vault keys never leave your iPhone.
• Detection results and activity history are stored only on your device and can be cleared by you at any time.
• Backups are created only when you choose to export one, and are encrypted with a passphrase that you set. We cannot read or recover your backups.
• Intruder photos (optional feature) are captured with the front camera after repeated failed unlock attempts and are stored only on your device.

Faces and People

• What it does. People finds the faces in your own photo library and groups them, so you can choose a person and protect their photos and videos in your vault. It exists to protect the people in your photos, not to identify anyone.
• What is created. For each person you choose to protect, XtraSafe stores a face signature — a set of numbers describing facial geometry. It is not a photograph, and a photograph cannot be reconstructed from it. Faces you do not select are never stored: they are grouped in memory while you choose, and discarded.
• Where it is kept. Face signatures and the names you give people are encrypted inside your vault, with the same keys that protect your photos. They are readable only while your vault is unlocked, and they are destroyed when you erase your vault.
• What never happens. Face signatures are never uploaded, never shared, never sold, never used for advertising, and never used to train any model. They never leave your iPhone. XtraSafe does not operate servers that could receive them.
• Not for unlocking. Face groups are used only to find photos. They are never used to authenticate you or to unlock the app.
• Your control. Stop protecting a person at any time; their face signature and name are destroyed immediately. Photos already in your vault stay in your vault. Erasing the vault destroys everything at once.
• Where you live. Depending on your location, you may need a person's permission before using their face data. You are responsible for using People lawfully.

Network use

Network activity is limited to Apple system services, such as processing purchases, restoring purchases, and iOS features. These services are operated by Apple under Apple's Privacy Policy. XtraSafe itself does not operate servers that receive your data.

Purchases

XtraSafe Pro subscriptions and the lifetime purchase are handled entirely through your Apple ID and App Store billing. We do not see or store your payment details.

Your control

• You can export vault items back to Photos, delete items, or erase the entire vault at any time from within the app.
• Deleting the app removes the encrypted vault stored on your device. Without your PIN, Face ID, or recovery phrase, vault contents cannot be recovered by you or by anyone else, including us.

Children

XtraSafe is a general-purpose privacy utility and does not knowingly collect any data from anyone, including children.

Changes to this policy

If our data practices ever change, we will update this page and the App Store privacy label before the change takes effect.

Contact