Privacy Policy
Effective November 10, 2026
What's in your vault
Photos and documents you add are encrypted on your iPhone with AES-256-GCM before they are saved. The key that encrypts them is itself locked by your vault passcode and by your recovery key. We never receive your passcode, your recovery key, or your encryption key.
iCloud backup
If your iPhone is signed in to iCloud, Lockstead backs up your vault to your own private iCloud storage, run by Apple. Everything is encrypted on your iPhone before it is uploaded, so neither Apple nor we can read it. Opening the backup needs your vault passcode together with a secret kept in your iCloud Keychain, or your recovery key. Your iCloud password alone is not enough.
Backup files
A backup file you export is encrypted the same way. Where you save it is up to you.
Reminders
Document expiry reminders are scheduled on your iPhone. Their text never includes a document's name.
Purchases
Lockstead Unlimited is bought through Apple's App Store. Apple handles payment, and we receive no personal or payment information.
Crash reports
When Lockstead crashes or freezes, it sends a report to Sentry, a crash-reporting service, so we can fix the problem. A report holds the technical details of the error, your iPhone model, and its iOS version. It never includes your photos, documents, their names, album names, your passcode, or your recovery key, and it isn't linked to you. You can turn crash reports off in Lockstead: tap ••• and switch off Share Crash Reports.
If you choose to share analytics with app developers in your iPhone's settings, Apple may also give us anonymous crash reports.
If you lose your passcode and recovery key
By design, there is no backdoor. If both are lost, nobody, including us, can open your vault or its backups.
Children
Lockstead collects nothing from anyone, including children, beyond the anonymous crash reports described above.
Changes
If this policy changes, we'll update this page and its effective date.
Contact
Questions: support@lockstead.app