SwiftLocker › Privacy Policy
Privacy Policy
Last updated October 2026
SwiftLocker keeps your photos, videos and documents private. It has no account, no ads and no analytics, and we can't see what you keep in it. This policy explains what stays on your device and the little that doesn't.
What stays on your device
- Your vault. Photos, videos, documents and folder names are encrypted on your device. We never receive them.
- Your PIN. Your PIN and decoy PIN are kept in your device's Keychain. Face ID and Touch ID are handled by Apple. SwiftLocker only learns whether they succeeded.
- Search. SwiftLocker finds what's in your photos and the text in them with Apple's on-device frameworks (Vision, and Apple's on-device language model where available). The results stay on your device.
- Break-in Alerts (off unless you turn them on). Photos taken with the front camera after wrong PINs stay on your device and move into your vault, encrypted. They're never uploaded.
- Notifications. Reminders and alerts are scheduled on your device. None come from us.
Photos and the camera
SwiftLocker asks for access to Photos to import what you pick and, if you turn it on, to move the originals to Recently Deleted. It uses the camera to scan documents into your vault and, if you turn them on, for Break-in Alerts. Nothing it reads or takes is sent to us.
iCloud sync and backups (optional)
If you turn on iCloud sync, SwiftLocker keeps your vault in its own private space in your iCloud account, using Apple's CloudKit. Your files are encrypted on your device before they're uploaded, and we have no access to your iCloud. Backup files you export are protected with a password you choose and are saved wherever you put them.
Purchases
SwiftLocker uses RevenueCat to handle Premium. RevenueCat receives your App Store purchase history under a random ID, so Premium works on all your devices and can be restored. If you signed in to an earlier version of SwiftLocker with Apple, your purchases stay under an ID based on that sign-in. It holds no name or email.
RevenueCat also receives Apple's ad attribution token, which says which Apple Ads campaign, if any, led to the download. It doesn't identify you, and SwiftLocker doesn't track you across other companies' apps or websites. See RevenueCat's privacy policy.
Crash reports
When SwiftLocker crashes or freezes, it sends a report to Sentry so we can fix the problem. A report holds the device model, the iOS version, the app version and the code that failed. SwiftLocker also sends Sentry its activity log, such as when an iCloud upload starts or fails, and how fast it starts and opens screens. Each report carries a random ID that Sentry makes for this install of SwiftLocker, so we can count how many people a problem affects. It isn't tied to your name, Apple Account or advertising ID, and a new one is made if you reinstall the app. None of it holds your photos, videos, documents, file or folder names, PIN, IP address or location. You can turn crash reports off in Settings › Send Crash Reports. See Sentry's privacy policy.
Support
If you email us, we receive your email address and your message. Contacting support from the app adds a diagnostics report to the email, which you can see before sending: technical logs that can include folder names, but never your PIN, photos or files.
What we don't do
We don't run accounts, show ads, collect analytics, track you, or sell or share your data.
Deleting your data
- Settings › Erase All Data deletes everything SwiftLocker keeps on this device, and in iCloud too while iCloud sync is on.
- Deleting SwiftLocker deletes the vault on your device.
- To delete SwiftLocker's iCloud data separately, open Settings › your name › iCloud › Manage Storage › SwiftLocker.
- To delete your purchase history held by RevenueCat, email us.
- Sentry deletes crash reports after 30 days. To have them deleted sooner, email us.
Children
SwiftLocker isn't directed at children under 13, and we don't knowingly collect personal information from them.
Changes
We'll post any changes on this page and update the date above.