iPrivate Data
Trust by precision

How your vault is protected.

This page states what iPrivate Data encrypts, what it protects with Apple’s file protection, and what we cannot do for you if credentials or backups are lost. Prefer this wording over marketing claims.

UpdatedJuly 28, 2026
Applies toiPrivate Data for iOS
DeveloperNileshKumar Rathod / NilApps

01

Summary

No developer vault accessWe do not operate a server that receives your vault contents. Support cannot unlock your vault.
Different protections by data typePasswords and similar records use AES-256-GCM. Media files use Apple Complete File Protection in the app container.
Recovery is layeredFace ID for daily unlock, a recovery key to reset a forgotten PIN on this device, and verified encrypted backups for reinstall or a new phone.
Premium does not hostage filesWhen Premium ends, existing items remain available to view, export, restore, or delete.

02

Encrypted with AES-256-GCM

These records are encrypted on device with AES-256-GCM:

  • Password vault records (and related AutoFill payloads you enable)
  • Private contacts
  • Identity wallet records
  • Optional encrypted backup archives (password-derived AES-GCM; new archives use 600,000 PBKDF2-HMAC-SHA256 iterations)

The local record-encryption master key is stored in the iOS Keychain, requires a device passcode, and requests device-owner user presence when loaded after the vault locks.

03

Vault media (photos, video, audio, notes, documents)

Vault media is stored in the private app container using Apple Complete File Protection, and access is gated by your vault lock (PIN, password, or Face ID when enabled). Camouflage, decoy vault, Share Extension, and Shortcuts hide or route content into that protected container.

We do not claim additional per-file AES encryption for media files. If another product markets “military-grade photo encryption,” compare that claim to this page before assuming identical design.

04

Cloud sync and backups

  • iCloud Sync is optional and off by default. When enabled, it uses your private CloudKit database to copy vault content across your devices. It does not store your unlock PIN, password, or recovery key, and cannot reset a forgotten PIN on a locked vault. CloudKit encrypts marked fields and assets; end-to-end protection against Apple depends on whether Advanced Data Protection is enabled.
  • After reinstall or a new phone, you set a new PIN, then turn Sync back on with the same Apple ID to download previously synced content (Premium required).
  • Encrypted backups are local password-protected archives you export and store yourself. Verify restore in Settings → Backup & Recovery before you need them.

05

Recovery and lockouts

Your unlock PIN or password is stored only as a secure one-way value on device. We cannot read it, email it, or reset it from our servers.

  • Face ID or Touch ID unlocks the vault without typing your PIN when enabled on supported devices.
  • Recovery key is shown once at setup. Enter it from Forgot PIN? on the lock screen to set a new unlock credential without deleting vault data on this device.
  • Encrypted backup is the primary path after reinstall or device loss.
  • Private iCloud Sync (if previously enabled) can restore vault content after you set a new PIN and turn Sync back on with the same Apple ID. It cannot recover or reset a forgotten PIN.
  • Decoy PIN opens a separate vault; do not confuse it with the main PIN.
  • Share / Shortcuts imports finish only after you unlock the primary vault.

06

Premium and access

Free mode may limit new item creation and Premium tools. Existing vault content is not deleted when a subscription ends. Billing and refunds are handled by Apple.

Premium support is prioritized (target: first reply within one business day when possible). Email niliosdeveloper@gmail.com.

07

Contact

NileshKumar Rathod / NilAppsniliosdeveloper@gmail.comSupport · Privacy · Security questions

Related: Privacy Policy