Your photos
aren't our business.

Your photo library

With your permission, Hush reads the photos you make available to it so you can browse, review, find duplicates and large files, and move private photos into the vault. Photo analysis runs on the device using Apple's frameworks.

Hush asks Apple's Photos system to confirm changes such as deleting originals. You can change or revoke Photos access in iPhone Settings. Photos and iCloud services remain subject to your Apple settings and Apple's privacy practices.

Your encrypted vault

Vault photos are encrypted with AES-GCM and stored in Hush's private application storage. A randomly generated key protects the files. Your chosen locks protect a wrapped copy of that key, stored in this device's Keychain.

We don't receive or store the files, encryption keys, PINs, passcodes, or patterns. The vault folder is excluded from device backups. Hush does not offer vault cloud sync, remote access, or an online backup.

Deleting the app deletes the vault. There is no reset or remote recovery service if you forget your locks. Before deleting Hush or replacing your device, restore photos to Photos or share them to a destination you control.

Face ID

Face ID is optional and off by default. When you enable it, Hush uses Apple's Local Authentication and Keychain services to protect a device-local copy of the vault key. Hush does not receive or store your face image or biometric template.

With Face ID enabled, Face ID alone opens the vault. Changing enrolled faces removes access to that protected key copy and requires your original vault locks.

Preferences and deletion

Hush stores app preferences, review choices, and lock settings locally on your device. Vault deletions stay in Hush's Recently Deleted for 30 days and are removed the first time the vault opens after that period. Photos deleted from the photo library follow Apple's Recently Deleted behavior.

You can restore vault photos to Photos or share individual photos to another app or location. A destination you choose handles that information under its own privacy practices.

Purchases

Apple processes the optional one-time unlock through the App Store. Hush uses Apple's StoreKit to check verified purchase entitlements and restore access. We do not receive your payment card details.

Apple may process purchase and account information under Apple's privacy policy. You manage your App Store purchases through your Apple Account.

Support messages

If you contact support, we receive the email address, message, and any attachments you choose to send. We use that information to respond to your request. Please don't send private photos, vault keys, PINs, or passcodes.

For questions about support information or this policy, email support@tryhushvault.app.

This website

This website doesn't include advertising, analytics scripts, sign-up forms, or user accounts. Our hosting providers may process basic connection information, such as IP addresses, browser details, and request logs, to deliver and secure the site.

The website doesn't access your iPhone's photo library or vault. Visiting the support or privacy page doesn't send vault data to us.

Changes to this policy

If Hush's privacy practices change, we'll update this page and its effective date. A change to this policy doesn't give us access to an existing local vault.