Security & Privacy

Security posture

HushVault is designed around privacy-first defaults: blurred previews, Vault PIN lock, and least-privilege access controls. You’re in control of what you upload and delete.

Vault PIN lock + auto-lock
Turn on a PIN gate for vault access and downloads. Auto-lock after inactivity.

Encryption-at-rest (optional)
If enabled, files are stored encrypted on the server. The encryption key is derived from your PIN. If you forget your PIN, we cannot recover the content.

Blurred thumbnails
Vault thumbnails are generated as blurred previews (privacy-safe at a glance).

What we do (and what we don’t)

We do: restrict access to your account + vault

We do: store minimal operational data (account + file metadata)

We don’t: sell data • run ads • train AI on your content

We don’t: share your vault media publicly

Best practices

Privacy is a system. Here are practical steps that help, especially in homes with shared devices:

Use a Vault PIN that’s not your phone PIN.
Treat it like a “second lock” for adult-only content.

Enable auto-lock.
Kids are fast. Auto-lock is your friend.

Separate accounts when possible.
Kids’ tablets should not be signed into an adult Google Photos account.

Transparency note: No web app can guarantee deletion from third-party services (Google Photos, iCloud, etc.). HushVault focuses on safe private storage + guided cleanup.