Lockbox for iPhone. Last updated: November 7, 2026.
Lockbox is built so that we never have your data in the first place. This policy explains what that means in practice.
Nothing. Lockbox has no account, no sign-up, no server and no analytics or advertising SDKs. We do not collect, receive, store or sell any personal data, usage data, device identifiers or crash reports. The App Store privacy label for Lockbox is "Data Not Collected".
Photos, videos and documents you add are encrypted on your iPhone with AES-256 before they are saved, using keys derived from your passcode and a secret stored in your device's Keychain. They are stored only on your iPhone, are not included in iCloud or computer backups, and are never uploaded anywhere. We cannot see, access or recover them.
Your passcode is never stored. It is used on your iPhone to unlock the encryption keys. If you turn on Face ID, the vault key is kept in your iPhone's Keychain and released by iOS only after a successful Face ID match. Face ID data itself is handled entirely by iOS and is never available to Lockbox.
Because only you hold the key, we cannot reset or recover a forgotten passcode, and files in the vault cannot be recovered without it.
Purchases and subscriptions are processed by Apple through your Apple Account. We receive no payment details. Apple's privacy policy applies to those transactions.
When you share or export an item, Lockbox decrypts a temporary copy so iOS can hand it to the destination you pick, and deletes that copy afterwards. What happens to the file after that is governed by the app or service you shared it with.
Lockbox does not knowingly collect information from anyone, including children.
If this policy changes, the updated version will be posted on this page with a new date.
Questions: zidmubarock@gmail.com