Privacy Policy

Last updated: July 11, 2026

This policy describes how KeepLink ("the app") handles data. The short version: everything you save stays on your device, encrypted, and we never see it.

Data We Collect

We do not collect any data. The app has no backend server, no user accounts, no analytics, no crash reporting, and no third-party tracking SDKs of any kind. Nothing you do in the app is transmitted to us, because there is no "us" on the other end of a network connection — there is no server this app talks to.

What's Stored, and Where

Everything the app stores lives only on your device, in the app's private storage, until you delete it or uninstall the app:

• Saved links: encrypted (AES-256-GCM) before being written to disk. The encryption key is derived from your PIN and is never stored in plaintext, and never leaves your device.
• Your PINs: neither your decoy PIN nor your real PIN is ever stored as plain text. Only a one-way cryptographic derivation (PBKDF2) is stored, used solely to verify a PIN entry — it cannot be reversed to recover the original PIN.
• Decoy notes: stored in plain text on-device. These are ordinary, non-sensitive notes by design, since the decoy screen is meant to look like a normal notes app to anyone who isn't you.

Deleting a link or note in the app removes it immediately and permanently. Uninstalling the app removes all of the above with no residual copy anywhere, because no copy ever existed anywhere but your device.

Network Access

The app requests internet access for exactly two purposes:

1. Viewing a saved link. When you open a link in the app's Secure Session browser, your device connects directly to that link's website, the same as it would in any browser. We do not see or log this traffic.
2. Premium purchases. If you choose to upgrade, the purchase is processed entirely by Google Play's billing system. We never receive your payment details — only a confirmation from Google Play that the purchase succeeded, which we use to unlock premium features on your device.

No other network requests are made by the app.

Permissions

The app requests only the minimum Android permissions needed for the above: internet access and Google Play Billing. It does not request access to your camera, microphone, contacts, location, photos, or any other device data.

Sharing Links Into the App

If you share a link into the app from another app (e.g. a browser), that link is encrypted and saved locally, exactly as if you had added it manually. This happens entirely on-device.

Clipboard

If you choose to copy a saved link to your clipboard, the app automatically clears it after 60 seconds. This is handled entirely by the app on your device.

Children's Privacy

This app is not directed at children and is not intended for use by anyone under the age of 13 (or the relevant minimum age in your jurisdiction).

Changes to This Policy

If this policy changes, the updated version will be posted at this same location with a new "Last updated" date.

Contact

Questions about this policy can be sent to: vault6121@gmail.com