Kryvo — Privacy Policy

Developer: Faraz Labs · Last updated: 1 October 2026

In short: Kryvo has no internet permission. Everything you hide stays on your phone, encrypted. We do not collect, store, sell or share any of your data — we never see it.

1. What Kryvo is

Kryvo is a private vault for Android. It hides photos, videos, audio files, web images, passwords and notes on your phone, can lock other apps with a PIN, and can disguise itself as another app (for example a calculator).

2. Data we collect

None. Kryvo does not have the Android INTERNET permission, so it cannot send anything to us or to anyone else. There are no accounts, no analytics, no advertising and no tracking of any kind.

3. Data stored on your phone

Hidden photos, videos, audio and web images are encrypted with AES-256-GCM and kept in Kryvo's private storage on your phone.
Passwords and private notes are encrypted with a key derived from your master password (PBKDF2-HMAC-SHA256, 310,000 rounds). Your master password itself is never stored.
Settings, PIN and fingerprint unlock data are kept in Android Keystore–protected storage on your phone.

Uninstalling Kryvo deletes all of this from your phone.

4. Permissions and why they are used

Photos, videos and audio (media access): to let you choose files to hide, and to put them back in your gallery when you unhide them.
Camera (optional, off by default): only for "Intruder selfie" — after wrong PIN attempts, a photo is taken and stored encrypted inside your vault. It never leaves your phone. The torch of the "Flashlight" disguise does not use this permission.
Fingerprint / face (biometrics): to unlock Kryvo. Your biometric data is handled by Android; Kryvo never receives it.
Usage access and "Display over other apps" (optional): only for App Lock — to notice when an app you chose to lock is opened and to show the PIN screen over it. This information is used only on your phone and is not stored or shared.
Foreground service and notifications: keep App Lock running while it is on, with a visible "App Lock is on" notification.
Run at startup: turns App Lock back on after the phone restarts.
Google Play Billing: if you buy an extra app icon, the payment is handled entirely by Google Play under Google's Privacy Policy. Kryvo only learns that the purchase was made.

5. Backups

Kryvo only creates a backup when you ask it to. The backup is one encrypted file that can be opened only with your master password. You choose where it is saved (for example Google Drive or your phone). Kryvo does not upload it anywhere itself.

6. Sharing and feedback

"Recommend to friend" and "Feedback" open another app on your phone (such as WhatsApp or your email app) with a ready-made message. Nothing is sent unless you send it from that app.

7. Children

Kryvo is not directed at children under 13 and does not knowingly collect any information from anyone.

8. Security

Kryvo uses strong, standard encryption and keeps your data offline. No method is perfect: please choose a strong master password, and keep your recovery key and backups safe. If you forget your master password and have no recovery key, your data cannot be recovered — not even by us.

9. Changes to this policy

If this policy changes, the new version will be published on this page with a new date.

10. Contact

Questions? Email usmanfaraz1818@gmail.com or reach out on LinkedIn.