Privacy Policy

Last updated: 30 June 2026

HidePal is a private vault for your photos and videos. It is built on one promise: your content is always yours. This policy explains exactly what we store, what we never collect, and the choices you have.

The short version: we store the photos and videos you choose to save, plus the minimum needed to log you in and recover your account. We show no ads, run no analytics or tracking, and never sell your data.

What we collect

Your content. The photos and videos you import into your vault, and the albums/folders you organise them into. This is stored so your library is available across reinstalls and devices.
A device identifier. When you first open the app we create an account tied to a per-device credential. It is how we recognise your vault — it is not linked to your name or email.
Optional Google or Apple sign-in. Only if you choose to add it, so you can recover or access your vault on another device. We receive a verified account identifier from Apple/Google; we do not receive your password.
Support messages. If you contact us, we keep the email address you reply from and the message you send, to help you.

What we do NOT collect

No advertising identifiers, and no ads — ever.
No analytics, behavioural tracking, or third-party trackers.
We never sell, rent, or share your content or data for marketing.
We do not look at the contents of your photos or videos.

How your content is used

Your content is used solely to provide the service: storing, syncing, displaying, and letting you export your own files. Viewing and exporting your own content is free, always — we never hold your memories hostage behind a paywall. Paid plans only change how much cloud storage you have.

Where it is stored

Content and account data are stored on secure servers in the European Union (Helsinki, Finland) and transmitted over encrypted HTTPS connections. Access is restricted to the systems that operate HidePal.

Account lock & recovery

Your vault is protected by a PIN and, optionally, Face ID / Touch ID. If you lose both, your content is never deleted — only access is paused until you prove ownership to us (for example, with an App Store purchase receipt) so we can restore access. See Support.

Data retention & deletion

We keep your content for as long as your vault exists. You can delete individual items in the app at any time. To delete your entire account and all associated content, email us at [email protected] and we will permanently remove it.

Children

HidePal is not directed to children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, we will update the date above. Material changes will be reflected here before they take effect.

Contact

Questions about privacy? Email [email protected].