Privacy Policy
What we collect
Nothing. Nox does not collect any personal data, usage data, analytics, or telemetry. There are no accounts, no sign-ups, and no data sent to any server operated by us.
How your data is stored
All vault data is stored exclusively on your device using iOS Keychain (iOS) or Android Keystore (Android), encrypted with AES-256. Your PIN is never stored — only a cryptographic hash is saved, which cannot be reversed to reveal your PIN.
Backup files are encrypted on your device before being saved to iCloud Drive or any other destination you choose. We have no access to these files.
Third-party services
Nox uses the following third-party service solely for processing in-app purchases:
- RevenueCat — handles subscription and purchase state. RevenueCat receives an anonymous app user ID, your purchase receipt for validation, and basic device information (such as OS version, app version, and locale). It never receives any vault data. See RevenueCat's privacy policy at revenuecat.com/privacy.
The app does not use analytics SDKs, advertising networks, tracking pixels, or any other third-party service that could access your data.
Notifications
Expiry reminders and security tips are scheduled locally on your device using the operating system's notification APIs. No data is sent to external servers to deliver notifications.
Data recovery
Because we have no access to your data, we cannot recover your vault if you lose your device or forget your PIN without a recovery option set up. This is by design.
Children's privacy
Nox is not directed at children under 13. We do not knowingly collect any data from children.
Changes to this policy
If we make material changes to this policy, we will update the effective date above. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact
If you have questions about this privacy policy, you can reach us through the App Store review or feedback channels.