Privacy Policy

Sanctum Photo Vault · Effective August 26, 2026

The short version

We collect nothing. Your photos, videos, folders, and captions are stored on your devices and in your own iCloud account. We operate no servers, embed no analytics, and have no technical ability to access your content.

What Sanctum stores, and where

Content you add to Sanctum is encrypted on your device (AES-256-GCM) and stored in the app's private space. If your device is signed into iCloud, Apple's CloudKit synchronizes that encrypted content to the private database of your iCloud account so your other devices can access it. That private database is controlled by Apple and accessible only to your Apple Account — not to us.

What we collect

Nothing. Sanctum contains no analytics, advertising, or tracking SDKs, and makes no network connections to any service other than Apple's iCloud on your behalf. The App Store privacy label for Sanctum is “Data Not Collected.”

Photo library access

Importing uses Apple's photo picker, which shows your library to you without granting Sanctum access to it; Sanctum receives only the items you select. If you choose to delete originals after import, Sanctum requests photo library permission and every deletion is confirmed by Apple's own system dialog.

On-device intelligence

If you enable Search, photos are analyzed on your device to recognize scenes and text so you can search by content. This analysis never leaves your devices, and disabling Search erases the stored index.

Payments

Subscriptions are processed by Apple through the App Store. We never see your payment details.

Children

Sanctum is not directed at children and collects no data from anyone, including children.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date. Because we collect nothing, changes are unlikely to be interesting.

Contact

Questions: see Support.