Privacy Policy
App: Locked Album (the "App")
Developer: Fivebet LLC ("we", "us")
1. Summary
The App is a locked album for photos, videos, and audio, protected by a PIN or pattern, with a calculator and a unit converter as extra tools.
This policy explains what the App does with your information, and what it does not do.
The short version:
- The App does not collect any personal information or any data you put in it.
- The App does not share data with anyone.
- The App does not connect to the internet. It does not even have the permission to do so.
- There are no ads, no analytics, and no crash reporting built into the App.
- There is no account to create.
2. Information we do not collect
The App never sends any of the following to us or to any third party:
- Contact details such as your name, email address, or phone number
- Photos, videos, audio, thumbnails, or folder names stored in the App
- Photos and videos taken with the App's in-app camera (including any recorded audio)
- Your PIN or pattern, recovery code, or biometric results
- Device identifiers, advertising IDs, or location
- Sensor readings (gravity, accelerometer, proximity) used by "Face-down lock"
- Usage data, event logs, or crash reports
On the App Store, our App Privacy label is "Data Not Collected". On Google Play, our Data safety section says "No data collected" and "No data shared". This policy matches those declarations.
3. Information stored on your device
Everything the App handles stays in the App's private storage on your device.
- Photos, videos, audio, and thumbnails are encrypted with AES-256-GCM.
- Photos and videos taken with the in-app camera are not saved to your device's gallery (photo library). They are encrypted and stored only inside the App. The temporary file the operating system creates when taking a picture or recording is deleted right after it is read. If you close or lock the App while recording or before the video has finished saving, that video is not saved and its temporary file is deleted.
- To play a video or audio file, the App decrypts it to a temporary file in its private storage only while it is playing, and deletes it when playback ends or the App locks.
- The encryption key is protected by a key derived from your PIN (or pattern) and stored through the operating system's secure storage (Keychain on iOS, Keystore on Android).
- Your PIN or pattern itself is not stored. Your recovery code is not stored either; it is shown once when you create (or reissue) it in Settings. Only if you choose "Save to file" or "Copy" on that screen does the App write the code to the location you pick (such as Google Drive) or to the clipboard. It is never sent to us (the App does not communicate over the network; any upload is done by the storage app you picked). The App clears a copied code after 1 minute and when it locks (while you are using another app, Android does not let the App clear it, so it is cleared when you return to the App; it may not be cleared if the App is closed).
- On Android, this data is excluded from OS backups (Google backup).
- On iPhone, this data stays encrypted and is included in the device backup (iCloud Backup, Quick Start), so it carries over when you change phones. The backup is an Apple feature stored in your iCloud or on your computer; it is never sent to us. Data you delete in the App may remain, still encrypted, in earlier backups.
- If you turn on automatic backup (Premium, Android only), the app writes a ZIP file, encrypted with a passphrase you choose, to a destination you pick (such as Google Drive or a folder on your device). The app itself never connects to the network; any upload is done by the destination app under its own terms and settings. We never receive this file or the passphrase, and the passphrase is not stored on the device.
We have no way to access this data. If you lose your PIN (or pattern) and your recovery code, we cannot recover your data.
4. Device permissions and what they are used for
The App uses only the permissions listed below.
| Permission | Purpose | Notes |
|---|---|---|
| Importing photos, videos, and audio | To add them to the App | The App uses the system picker (PHPicker on iOS, the system file picker on Android), so it does not ask for access to your whole photo library. Only the items you pick are passed to the App. Deleting the originals right after import also goes through the system confirmation dialog using what the picker returned, so normally no permission is requested. |
| Photos and videos access (Android only) | To delete the original file of a photo or video you imported, later | Requested only when, for a photo or video you chose to keep at import time, you later choose "元の写真を端末から削除" (Delete the original photo from the device; "元のファイルを端末から削除" for videos) in the viewer menu. The deletion goes through the system confirmation dialog. The App never lists, analyzes, or uploads your photo or video library. If you decline, every feature except this deletion still works. |
| Camera | To take photos and videos with the in-app camera | Requested only when you open the camera screen. Photos and videos you take are not saved to the device gallery; they are encrypted and stored only inside the App, and never sent anywhere. Videos can be taken only after you turn on "Also take videos" in Settings. |
| Microphone | To add sound to videos taken with the in-app camera | Requested only when you turn on "Also record audio" in Settings. Audio is recorded only then; when it is off or not allowed, videos are recorded without sound and the microphone is not used. Recorded audio is encrypted together with the video, stored only inside the App, and never sent anywhere. Everything except audio recording works without this permission. |
| Sensors (Android only) | To detect that the phone was placed face down when "Face-down lock" is on | Gravity, accelerometer, and proximity readings are read on the device only while the locked album is open. They are not stored or sent. No OS permission is needed, and the option is off by default. |
| Biometrics (Face ID, Touch ID, fingerprint) | To unlock the locked album instead of entering the PIN or pattern | The operating system performs the check. The App only receives "success" or "failure". The App never obtains or stores your face or fingerprint data. Used only if you turn it on in settings. |
| Storage (file read/write) | Not requested | Backup ZIP export and import use the system share sheet and file picker, so no storage permission is needed. |
| Network | Not requested | The App has no internet permission. |
| Location, contacts, notifications | Not requested |
5. In-app purchases
Premium (JPY 250 per month or JPY 1,980 per year as a subscription, or JPY 5,980 as a one-time purchase, in Japan; prices vary by country) is sold through Apple's App Store or Google Play in-app purchases.
- Apple or Google processes the payment. We never receive your credit card number or other payment details.
- We do not receive information that identifies you as a purchaser. The App checks your purchase status only through information returned by the App Store or Google Play on your device.
- Purchase history, refunds, and cancellation are handled in your Apple or Google account settings. Apple's and Google's handling of your information is governed by their own privacy policies.
6. Information we receive when you contact support
If you email our support address (below), we receive your email address and the content of your message.
- Purpose: only to answer your request and keep a record of it.
- Retention: deleted within a reasonable period after the matter is closed (normally within one year).
- Sharing: not shared with third parties except where required by law.
- Deletion: email the same address and we will delete your support record.
The App itself has no feature that sends support data; it only opens your email app.
7. Children
The App is not designed for children under 13. Because the App collects no information from anyone, it collects no information from children.
8. Deleting your data
- You can delete photos, videos, audio, and folders inside the App at any time. Deleted items stay in the trash for 30 days and are then removed permanently (you can also remove them from the trash right away).
- Uninstalling the App deletes all its data on your device (photos, keys, settings).
- Because we hold no data, there is nothing to request from us, except support email records (see section 6).
9. For users in the EU, EEA, and UK (GDPR and UK GDPR)
Because the App sends no personal data to us, we do not act as a "controller" of personal data in connection with your use of the App.
The only personal data we process is support email described in section 6. The legal basis is our legitimate interest in answering your request (GDPR Article 6(1)(f)).
You have the right of access, rectification, erasure, restriction, objection, and the right to lodge a complaint with a supervisory authority. To exercise these rights, contact the support address below.
We are located in Japan, outside the EU. Support email is processed in Japan, which is covered by an adequacy decision of the European Commission.
10. For California residents (CCPA / CPRA)
We do not collect personal information of California consumers through the App.
We do not sell or share personal information, and have not done so in the preceding 12 months.
Your rights to know, delete, correct, and not be discriminated against apply only to support email records, and can be exercised through the support address below.
11. Security
Encryption protects your photos, videos, and audio, but the security of the device itself (device lock, OS updates, what happens if the device is lost) is under your control.
If you find a security vulnerability in the App, please report it to the support address below.
12. Changes to this policy
When we change this policy, we update the date at the top of this page. For significant changes, we also mention it in the App's release notes. The updated policy takes effect when it is posted on this page.
13. Contact
Developer: Fivebet LLC
Email: support@fivebet.app
Support is available in Japanese and English.