A little context
Noxx is a private vault for photos, videos, files, notes and voice recordings, developed by Kofi Nyarko. This policy covers the iOS and Android app and this website. You do not need a Noxx account. Your vault content is processed on your device; cloud backup, purchases and usage analytics involve the services described below. We do not operate a server that stores your vault content or your unlocking pattern.
Your vault & encryption
Noxx encrypts vault content and its index on your device. Your unlocking patterns, recovery phrases and vault encryption keys are not sent to us, RevenueCat or PostHog. We cannot open your vault or recover its content for you. Keep your recovery phrase safe. Files you export or share are made available to the destination you choose; those copies are outside Noxx’s protection. Importing an item does not by itself remove its original from your photo library or another app.
Photos, camera & microphone
Noxx uses access to selected photos, videos and files to import the items you choose, camera access to take photos or videos, and microphone access to record audio. With intruder photos enabled and camera permission granted, it can photograph failed unlocking attempts. Pro may enable this feature and show a notice; you can turn it off in the app. Intruder photos are stored encrypted locally and may be included in an enabled vault backup. We do not use these images for facial recognition. You can manage device permissions in system settings; denying access limits the related feature. Device motion is processed locally for features such as shake-to-lock and face-down locking.
iCloud & Google Drive backups
Cloud backup stores encrypted vault content and the technical metadata needed to restore it in your own cloud account. On iOS, Pro vaults can automatically enable backup when iCloud Drive is available; Noxx shows a notice and provides a per-vault switch. On Android, Noxx first asks you to authorize Google Drive access. It requests only drive.appdata, which allows it to create, read, update and delete its own backup files in Drive’s hidden app-data folder. It does not access your other Drive files. Google authorization tokens are used on the device to perform backup and restore requests, not sent to our servers. Google user data is used only to provide backup, restore and backup deletion, not for advertising, analytics, sale or AI training. Noxx’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Apple or Google also processes account, storage and connection information under its own policies. A manual encrypted backup file is saved wherever you choose.
Usage analytics & your choice
When “Share anonymous usage” is enabled, Noxx sends limited usage events to PostHog’s EU service to understand reliability and improve the app. Examples include onboarding progress, feature use, import success or error codes, broad import-size ranges, media type, paywall interactions and purchased product. Events can include a generated app identifier, timestamps, app and device information; network requests expose an IP address to the service. This is pseudonymous usage data, rather than a guarantee that it cannot be linked to a device. We do not send file contents, filenames, vault identifiers, unlocking patterns, recovery phrases or exact per-vault item counts. Session recording and automatic capture of screen interactions are not enabled. Analytics starts off for device regions in the EU/EEA, UK and Switzerland, and starts on in other regions. You can change the onboarding toggle at any time; version 1.0.1 also provides Me → Privacy → Share anonymous usage. Turning it off stops new app usage events. It does not automatically erase events already received. When usage sharing is enabled, Noxx links its generated analytics identifier to RevenueCat so limited subscription and purchase activity can be measured in PostHog. Changes to that billing link take effect when the app next successfully synchronizes with RevenueCat; an offline change cannot immediately update the server-side choice.
Purchases & subscriptions
Apple or Google processes your payment. Noxx uses RevenueCat to validate purchases, manage Pro access and restore purchases. RevenueCat receives purchase history, transaction or receipt information, product and subscription status, a generated app user identifier, and relevant app, platform and storefront information. This processing is separate from the optional PostHog analytics setting. When usage sharing is enabled, RevenueCat notifications pass through an authenticated relay hosted on Vercel. The relay forwards only approved billing events to PostHog for opted-in production installations: subscription, trial, renewal, cancellation, expiration and reported refund activity, plan category, billing country, store, and applicable gross amounts in US dollars. It does not forward raw receipts, transaction identifiers or vault content to PostHog. Essential purchase validation and Pro access continue when usage sharing is off. We do not receive your payment card details. Deleting Noxx does not cancel a subscription; manage or cancel it through your App Store or Google Play account.
Service providers & support
We do not sell your personal data or use it for targeted advertising. The services used for the purposes above are Apple, Google, RevenueCat, PostHog and Vercel for website hosting and the billing-event relay. Their processing may involve countries outside your own; PostHog is configured to use its EU host. If you email support, we receive your email address, message and anything you attach, and use them to respond. Please do not send unlocking patterns, recovery phrases or private vault files. Information may also be disclosed when required by applicable law.
Retention & deletion
Local vault content remains until you delete it or remove app data. Uninstalling the app does not delete cloud backups, exported files, purchases or provider-held records. Turning off cloud backup through Noxx’s “Turn off and delete” control requests deletion of that vault’s cloud copy when the cloud service is reachable. Revoking Google access stops future authorized access but does not itself delete existing backups; you can also manage Noxx’s hidden app data through Google Drive settings and revoke access through your Google Account. Manage iCloud copies through the app or Apple’s storage controls. Separate manual backups and exports must be deleted separately. Deleted items are removed from an active cloud mirror when it next successfully syncs; offline copies and provider retention may outlast local deletion. Purchase, analytics, hosting and support records are retained according to their purpose, applicable legal requirements and provider retention settings. Contact us about deletion of information we hold.
Your controls & requests
You can manage analytics, cloud backup and intruder photos in Noxx, permissions in device settings, and Google authorization in your Google Account. Contact us to request access, correction or deletion of personal information we hold, or to raise a privacy concern. Depending on your location, you may also have rights to object, restrict processing, receive a copy of your data or complain to a data protection authority. We may need information to verify a request. We cannot retrieve or decrypt your vault, and an analytics request may require information that lets us locate the relevant pseudonymous records.
About this website
This website uses no advertising cookies, analytics scripts, tracking pixels or contact forms. Your browser sends ordinary connection information, such as your IP address, requested URL and browser details, to Vercel to deliver the site and maintain security. Hosting logs follow the provider’s retention settings. Links to other services are governed by their own privacy policies.
An app for adults
Noxx is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can address it.
When things change
We will update this policy when our data practices change. The date above identifies the latest version. Where a change requires notice or new permission, we will provide it before using data for that new purpose. No storage or transmission system can be guaranteed completely secure; keep your device, cloud account and recovery phrase protected.
Questions? You’re
in the right place.
Contact Kofi Nyarko, Noxx’s developer, about this policy, your privacy, or deleting support correspondence.
Email privacy support