Privacy Policy

Last updated: March 18, 2026

This Privacy Policy explains how the PhotoVault mobile application ("the App") handles your information. PhotoVault is an independent client application that connects to Cubbit DS3, a third-party distributed cloud storage service operated by Cubbit. This app is not an official Cubbit product.

1. What the App Does

PhotoVault backs up photos and videos from your device's photo library to a Cubbit DS3 bucket of your choosing. Authentication is performed using Cubbit's own identity platform. PhotoVault does not operate its own servers — all data flows directly between your device and Cubbit's infrastructure.

2. Data Accessed on Your Device

• Photo Library — PhotoVault reads photos and videos to upload them to your Cubbit bucket. It does not modify, delete, or share your media with any party other than your Cubbit account.
• Account Credentials — Your email address and password are used solely to authenticate with Cubbit's servers. Your password never leaves your device in plain text; authentication uses an ED25519 challenge-response protocol where only a cryptographic signature is transmitted.
• Authentication Tokens — Session tokens received from Cubbit are stored in your device's encrypted secure storage (iOS Keychain / Android Keystore) and are never shared with third parties.

3. Data Transmitted to Third Parties

All photos, videos, and associated metadata you choose to back up are transmitted to and stored on Cubbit DS3, operated by Cubbit. By using the App you accept Cubbit's own terms of service and privacy policy, available at cubbit.io/legal.

The PhotoVault developer has no access to the files you upload, your Cubbit account, or any data stored in your Cubbit bucket.

4. Analytics and Tracking

PhotoVault does not include any analytics SDK, advertising framework, or tracking library. No usage data, crash reports, or telemetry are collected by the App developer.

5. Data Retention and Deletion

PhotoVault stores the following data locally on your device:

• Encrypted authentication tokens (deleted on Sign Out)
• Upload history records tracking which assets have been backed up (can be cleared via Settings → Reset Upload History)

Files stored in your Cubbit bucket are managed entirely through your Cubbit account. To delete backed-up files, use the Cubbit platform directly or contact Cubbit support.

6. Children's Privacy

PhotoVault is not directed at children under the age of 13. It requires an existing Cubbit account to function and does not knowingly collect any personal information from children.

7. Changes to This Policy

If this Privacy Policy is updated, the new version will be published at this URL with a revised "Last updated" date. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

8. Contact

For questions about this Privacy Policy, please contact: giulio.cinelli@gmail.com