Sealcloak is an offline private vault for Android. Your files are encrypted on your phone under a random key for each vault, and that key can only be unlocked with your pattern or your recovery phrase. We run no service that receives your files, your pattern or your keys.

Overview

The Android app does not have the internet permission. We removed it from the app on purpose, so Sealcloak cannot send anything anywhere, even by mistake. There is no account, no analytics, no crash reporting, no advertising and no tracking inside the app.

What we do not collect

Your photos, videos, documents, audio, notes or scans. They are encrypted with AES-256-GCM on your phone and stored only in the app’s private storage. We never receive them.
Your pattern. It is turned into a key on your phone with Argon2id, a slow key-derivation function made to resist guessing. The pattern itself is never stored.
Your encryption keys. Each vault has its own random master key. It is kept wrapped, protected by your pattern and by a key held in Android’s hardware-backed Keystore. Keys are cleared from memory when the vault locks.
Your recovery phrase. It is shown to you once at setup and kept on your phone only in encrypted form. We cannot see it and cannot reset it.
An account of any kind. No email, no phone number, no sign-in.
Android cloud backup. The app opts out of Android’s automatic app backup, so your vault is not copied to Google Drive behind your back.

Permissions the app uses

Camera: for the in-app camera and document scanner, and for intruder photos if you turn them on. Pictures are saved encrypted inside your vault, never to your gallery.
Biometrics: to unlock with your fingerprint or face, if you turn it on. Android handles the biometric check; the app never sees your fingerprint or face.
Run at startup: so a backup schedule you set keeps working after your phone restarts.

The app does not ask for contacts, location, microphone, storage-wide access or the internet. Files you add are picked through Android’s own file and photo pickers, which only give the app the items you choose.

Intruder photos

If you turn this on, the front camera takes a photo after repeated wrong patterns. While the vault is locked the photo is sealed to a public key, so the app can add a photo but cannot read the ones already saved. Only the vault that turned the feature on can open them, after you unlock it. Photos never leave your phone and never appear in a notification. Android shows its normal camera indicator whenever any app uses the camera, and the app cannot hide it.

Backups you make

Backups are created only when you ask, or on a weekly or monthly schedule you set, and are saved to a folder you pick. A backup is one file, encrypted with your vault’s recovery phrase or with a passphrase you choose at the time. We do not receive backups and cannot open them. Once a backup is outside the app, how safe it is depends on where you keep it.

Disguise features

The calculator disguise and custom icon only change what the app looks like on your phone: the icon, the name and the screen it opens to. The secret code for calculator mode is stored as a slow hash, not as text, and never leaves your phone.

Purchases

Sealcloak Pro is sold through Google Play. Google handles the payment and refunds under Google’s privacy policy. We do not receive your name, card or payment details. The app only asks Google Play whether Pro is active on your account, using Google’s billing service on your device.

This website

This website has no analytics, no advertising pixels and no cookies. It stores one small preference in your browser, light or dark theme, using local storage on your device only. The page fonts load from Google Fonts, which can see your IP address when your browser fetches them. The site is hosted on Vercel, which, like most web hosts, may keep ordinary server logs such as IP address and page requested. If you email us, we receive your email address and your message.

Messages you send us

If you write to us for support, we read your message and reply to the address it came from. We use it to help you and to improve the app. We keep it only as long as we need it for that. Please never send your pattern, recovery phrase or backup passphrase. We will never ask for them.

Third-party services

Google Play and Google Play Billing: to install the app and process purchases.
Android Keystore: on your phone, to protect the keys that wrap your vaults.
Google Fonts and Vercel: only for this website, as described above.

The app itself talks to none of these.

Children

Sealcloak is not directed at children under 13. The app collects no information from anyone, and requires no account.

Changes to this policy

If this policy changes, we will update this page and the date at the top. If a change affected what the app collects, we would say so in the app’s update notes as well.

Contact

Questions about this policy? Visit our support page or email yssupports@gmail.com.

Privacy policy