Privacy Policy
What we collect
Nothing. Nox does not collect any personal data, usage data, analytics, or telemetry. There are no accounts, no sign-ups, and no data sent to any server operated by us.
How your data is stored
All vault data is stored exclusively on your device using iOS Keychain (iOS) or Android Keystore (Android), encrypted with AES-256. Your PIN is never stored — only a cryptographic hash is saved, which cannot be reversed to reveal your PIN.
Backup files are encrypted on your device before being saved to iCloud Drive or any other destination you choose. We have no access to these files.
Document scanning
You can fill in a passport or ID card by scanning it with your iPhone's camera. Scanning uses Apple's built-in VisionKit and Vision frameworks, and the text is read entirely on your device. Nox does not save the camera images, add them to your photo library, or send them anywhere — not to us, and not to any other service. Only the details you choose to save are stored, inside your encrypted vault.
Nox asks for camera access the first time you start a scan and uses the camera for nothing else. You can turn camera access off at any time in iOS Settings and still enter details manually.
Third-party services
Nox uses the following third-party service solely for processing in-app purchases:
- RevenueCat — handles subscription and purchase state. RevenueCat receives an anonymous app user ID, your purchase receipt for validation, and basic device information (such as OS version, app version, and locale). It never receives any vault data. See RevenueCat's privacy policy at revenuecat.com/privacy.
The app does not use analytics SDKs, advertising networks, tracking pixels, or any other third-party service that could access your data.
Notifications
Expiry reminders and security tips are scheduled locally on your device using the operating system's notification APIs. No data is sent to external servers to deliver notifications.
Data recovery
Because we have no access to your data, we cannot recover your vault if you lose your device or forget your PIN without a recovery option set up. This is by design.
Children's privacy
Nox is not directed at children under 13. We do not knowingly collect any data from children.
Changes to this policy
If we make material changes to this policy, we will update the effective date above. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact
If you have questions about this privacy policy, you can reach us through the App Store review or feedback channels.