S Secra

Privacy Policy

Last updated: July 22, 2026

Secra ("we", "our", "the app") is a private vault developed by AppSweat. This policy explains what information the app handles and, more importantly, what it does not.

1. Information Stored On Your Device

Everything you place inside Secra — photos, videos, files, notes, passcodes, decoy-vault content, biometric preferences — is stored only on your device, inside the app's sandboxed container. We do not upload, sync, or back up your vault to any server operated by us.

• Vault contents are encrypted at rest using the iOS Data Protection API tied to your device passcode.
• Your passcode and decoy-vault passcode are stored in the iOS Keychain; we cannot recover or reset them.
• If iCloud backup is enabled on your device, vault files may be included in your personal iCloud backup — that is between you and Apple, and remains encrypted with your Apple ID.

2. Information We Receive From Apple / RevenueCat

When you buy or restore a Secra subscription, purchase processing goes through Apple's App Store and our subscription infrastructure provider, RevenueCat. We receive:

• An anonymous user identifier generated on your device
• Your subscription status (active / expired / trial), product ID, and purchase / renewal dates
• Country / storefront (from the App Store receipt)

We do not receive your name, email, Apple ID, or payment details. This data is used only to unlock premium features and honor restore-purchase requests.

3. Diagnostics & Crash Reports

Secra does not include third-party analytics SDKs. If you have "Share With App Developers" enabled in iOS Settings → Privacy → Analytics & Improvements, Apple may send us anonymized crash reports so we can fix bugs. These reports contain no vault contents.

4. Intruder Camera Capture

The intruder-capture feature takes a photo using the front camera only after a failed passcode attempt, and stores it only on your device, inside the vault. It is never transmitted anywhere.

5. Screenshot Blocking

Where iOS permits, Secra hides sensitive content when the app is backgrounded or a screenshot is attempted. This is a local UI protection; no data leaves your device.

6. Third-Party Services

• Apple App Store — payment processing, receipt validation. Governed by Apple's privacy policy.
• RevenueCat — subscription entitlement management. See RevenueCat's privacy policy.

Secra does not integrate advertising networks, tracking pixels, or social-login SDKs.

7. Children's Privacy

Secra is not directed to children under 13. We do not knowingly collect personal information from children.

8. Your Rights (GDPR / CCPA)

Because we do not host your vault content, there is nothing on our servers to export or delete on your behalf. You may:

• Delete all vault data instantly by uninstalling the app.
• Contact us at appsweatmobile@gmail.com to request deletion of the anonymous subscription identifier held by RevenueCat.
• Manage your subscription any time in iOS Settings → [your name] → Subscriptions.

9. Changes To This Policy

If we make material changes to this policy we will update the "Last updated" date above and, where appropriate, notify you inside the app.

10. Contact

AppSweat
Email: appsweatmobile@gmail.com