Privacy shouldn't depend on trusting us.
Every privacy app asks you to trust it. We'd rather build one where trust matters as little as possible. These are the principles Sealcloak is built on, and the promises we won't break.
1. What isn't online can't leak online.
Servers get breached. Companies get bought. Policies change, quietly, in emails nobody reads. The only copy of your private photos that can't be exposed by any of that is one that never left your phone. So Sealcloak has no internet permission, and Android itself stops it from connecting.
2. No account is the best account.
An account is a username, an email and a password stored somewhere you don't control, and a door someone else can knock on. A vault doesn't need one. Sealcloak never asks who you are.
3. Hidden isn't protected. Encrypted is.
Moving a photo to a hidden folder only keeps it off one screen. Anyone with a file manager or a computer can still open it. Every file in Sealcloak is encrypted with AES-256-GCM, using a key made from your pattern, so without that pattern the files are noise.
4. No backdoors, including for us.
We can't open your vault, reset your pattern or recover your files. That's not a limitation we apologise for; it's the point. A vault its maker can open is a vault anyone who pressures its maker can open. Your recovery phrase is the only spare key, and it's yours.
5. Real life includes pressure.
Privacy tools are usually designed for strangers. But the people most likely to demand your phone are often close to you. That's why Sealcloak has Coerce, a believable decoy vault, why it never shows how many vaults exist, and why intruder photos tell you who tried.
6. Destructive features stay off until you really mean it.
Erasing a vault after wrong patterns, or when Coerce is used, can protect people in danger. It can also destroy a family's photos because a toddler played with the phone. So every erase feature is off by default, and turning one on means typing PERMIT. You decide, deliberately.
7. You pay with money, not data.
Free apps that show ads or share device IDs are paid for with information about you. Sealcloak has a free plan with limits and a paid Pro version through Google Play. No ads, no analytics, no trackers, no data to sell.
What this means in practice
You are responsible for one thing we can't do for you: backups. Because nothing is in a cloud, losing your phone without a backup means losing what's on it. Sealcloak makes this easy with scheduled encrypted backups to a place you choose. We think that's a fair trade for a vault nobody else can reach.
If you ever catch us breaking one of these principles, tell us at yssupports@gmail.com. Read more about Sealcloak, or see how the security works.