Nobody can see inside your vault — not even us
Everything you add to Pyxis is encrypted on your device with keys that come from your pattern or recovery phrase. Those keys are never transmitted, so we cannot decrypt, view or recover your content.
Contents
1. How Your Vault Is Protected
Photos, videos, files, notes, file names and folder names you add to Pyxis are encrypted on your device with AES-256-GCM before they are stored in the App’s private storage. The keys are derived from your pattern or your 9-word recovery phrase and never leave your device.
We cannot decrypt, view or recover your content. If you lose both your pattern and your recovery phrase, nobody — including us — can open that vault.
Encrypted vault files are part of the App’s storage and may be included in iPhone or computer backups you make. They remain encrypted in those backups.
2. Data We Do Not Collect
We do not collect:
- Your name, email address, phone number or any account details — Pyxis has no accounts
- Your photos, videos, files, notes, file names or folder names
- Your patterns or recovery phrases
- Your contacts or location
- Usage analytics — we do not measure how you use the App
Anonymous crash reports and the ads shown on the free plan are described below.
3. iCloud Backup & Sync
If iCloud Backup is on (the default), Pyxis copies your already-encrypted vault files to the App’s private container in your iCloud account, so you can restore them on a new device and, with Pyxis Pro, sync between your iPhone and iPad.
Apple receives only encrypted data; the keys stay with you. We have no access to your iCloud. You can turn backup off for each vault in Settings, which deletes that vault’s backup.
4. Shared Vaults
If you share a vault, its contents are re-encrypted on your device with a new random key and uploaded to our sharing service, hosted on Cloudflare. That key is protected by the share phrase you give the recipient. We never receive the phrase, any readable content, file names or the name of the share.
The service stores the encrypted data, hashes of access tokens, the expiry date and open limit you chose, and a counter of how many times the share was opened. Our hosting provider processes IP addresses to deliver the service, as with any website; we do not log them for any other purpose. Shared data is deleted when you revoke the share, when it expires, or when its open limit is reached.
5. Crash Reports
If “Share crash reports” is on (Settings → This iPhone; on by default), the App sends anonymous crash reports to our crash-reporting provider, Sentry, so we can fix bugs. A report contains the error, a stack trace, the App and iOS version and the device model.
We strip file names, file paths, identifiers and device names before a report is sent. Reports contain no vault content, no account and no advertising identifier. You can turn crash reports off at any time.
6. Advertising
The free version of Pyxis is supported by ads served through Google AdMob. Ads are shown outside your private content: never on the lock screen, in the photo viewer or in the camera. The Google Mobile Ads SDK is part of the App, and it — not Kavvara — collects data to serve and measure ads. According to Google’s own disclosures, that includes your IP address, device type and model, iOS version, approximate location derived from your IP address, and how you interact with ads.
The ads SDK never receives your photos, files, notes, vault names or patterns. We see only aggregate reporting, such as how many ads were shown. Pyxis Pro removes advertising entirely.
7. Your Choices About Advertising
On iOS you will be asked whether to allow tracking across apps and websites, in accordance with Apple’s App Tracking Transparency framework. If you allow it, Google may use your device’s advertising identifier to show more relevant ads; if you decline, ads still appear but are not personalised. You can change this at any time in Settings → Privacy & Security → Tracking.
In the European Economic Area, the United Kingdom and Switzerland you will additionally be shown a consent choice before any ad is loaded, and you can change that choice later in the App under Settings → Ad privacy choices.
8. Purchases
Pyxis Pro is sold through Apple’s In-App Purchase system. Apple processes the payment, and your purchase is verified on your device by Apple’s StoreKit. We never receive your payment details, your Apple ID or your purchase history, and we do not use any third-party purchase service.
9. Permissions
Pyxis asks for the camera, microphone and photo library only when a feature needs them, and uses them only for that feature: the camera and microphone to capture photos and videos directly into your vault, and photo library access to import items you choose, delete originals when you ask, and save items you export.
None of this data leaves your device through Pyxis, except in encrypted form as described in the backup and sharing sections above.
10. Third-Party Services
These are the only third parties involved:
- Google (AdMob & UMP) —https://policies.google.com/privacy
- Sentry (crash reports) —https://sentry.io/privacy/
- Cloudflare (shared vault hosting) —https://www.cloudflare.com/privacypolicy/
- Apple (iCloud, distribution & payments) —https://www.apple.com/legal/privacy/
How Google uses information from apps that use its services is described at policies.google.com/technologies/partner-sites.
11. Your Rights
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to complain to your local data protection authority. Where processing relies on consent — as personalised advertising does — you may withdraw it at any time from within the App.
If you are a California resident, you have the right to know what personal information is collected, to request its deletion, and not to be discriminated against for exercising those rights. We do not sell or share your personal information.
In practice we hold very little: Pyxis has no accounts and we cannot read your vaults, so for most requests the honest answer is that we have nothing on file about you. For data held by Google in connection with advertising, please use Google’s own controls, linked above.
12. Children
Pyxis is not directed at children under 13, and we do not knowingly collect personal data from them.
13. Changes & Contact
If this policy changes in a way that affects you, we will update the date at the top of this page. Material changes will also be reflected in the App Store privacy details for Pyxis.
Questions about this policy, or a request about your data, can be sent to hello@kavvara.com. Never send us your pattern or recovery phrase — we will never ask for them.