Privacy policy
This policy describes how the NeverLeave mobile application (“the App”) handles information. It is published in English only; the App itself is translated into 17 languages, but this document is the canonical version for store distribution.
Summary
NeverLeave encrypts photos, videos, and other files on your device. The developer does not operate a NeverLeave account system or NeverLeave cloud that receives your media or passphrases. Optional cloud sync, if you turn it on, only talks to a server you configure (WebDAV).
What the App stores on your device
| Data | Where | Purpose |
|---|---|---|
Encrypted vault files (.kfv) |
App-private storage | Your locked media and files |
| Vault / settings metadata (names, sizes, preferences, optional passphrase hint text) | App-private JSON | Listing, settings, recovery hint display only — never used to derive a passphrase |
| App passcode (salted hash), optional default passphrase, optional WebDAV credentials | OS keystore (device-bound) | Unlock UI; optional encrypt default; optional sync auth |
| Short-lived decrypted or pre-encrypt temps | App cache (e.g. player / capture / inbound / strip / backup) | Play, capture, import, EXIF strip, passphrase share — deleted when done and swept at launch |
The App does not write your passphrase to durable documents storage. Passphrase “backup” uses the system share sheet and a cache temp that is deleted when sharing finishes.
Permissions and why they are requested
| Permission / capability | Why |
|---|---|
| Photos / videos (media library) | Pick items to encrypt; save decrypted media only when you choose Decrypt & save |
| Camera | Capture a photo or video straight into the encrypted vault (not to the camera roll) |
| Microphone | Record audio with in-app video capture |
| Notifications | Progress while encrypt/decrypt runs (including foreground progress) |
| Biometric / Face ID (where available) | Optional unlock and optional gate for the default passphrase |
| Network | Optional WebDAV sync/restore you configure; connectivity checks |
Network and third parties
- No NeverLeave-operated analytics, advertising, or crash-reporting SDK is bundled for the purpose of profiling you.
- Optional WebDAV sync: if you enter a server URL and credentials, the App may upload/download ciphertext (
.kfvfiles) and related sync metadata to that server. The developer does not receive that traffic. Your WebDAV provider’s own privacy policy applies to data on their servers. - Opening a decrypted non-media file uses the system share sheet; the destination app you pick is outside NeverLeave’s control.
Decrypted content
Decrypted bytes stay under the App’s private cache for in-app play/view, or leave the App only when you explicitly:
- save media back to the device library, or
- share/open a file through the system share sheet.
Children
The App is not directed at children under 13 (or the equivalent age in your country). Do not use the App to store information from children if you are not permitted to do so.
Your choices
- Do not enable WebDAV if you do not want ciphertext to leave the device.
- Remove vault items, clear the App’s data, or uninstall to delete on-device vault data (OS keystore entries may clear with uninstall depending on the platform).
- Losing your passphrase means encrypted files cannot be recovered by the developer — there is no backdoor.
Changes
We may update this policy when the App’s behavior changes. The effective date at the top will change. Continued use after an update means you accept the revised policy for store-distribution purposes; material changes should be reflected in the store listing as required by the platform.
Contact
Questions about this policy: [email protected]
← Back to NeverLeave