Security & privacy

HushVault is built around one idea: private by default. No public galleries. No “share link” surprises. Just your vault, behind your sign‑in and (optionally) your PIN.

Google Sign‑In
We use Google only to authenticate your account. We don’t read your Google Photos library and we don’t post on your behalf.

Vault PIN lock + auto‑lock
Add a second layer before viewing and downloading. Auto‑lock helps when a kid grabs your device “for a second.”

Blurred previews
Thumbnails are privacy‑safe by default — so the vault itself stays discreet at a glance.

Encryption at rest (optional)
Turn on encryption for maximum privacy. If enabled, the key is derived from your PIN. If you forget the PIN, encrypted files can’t be recovered.

What we do (and what we don’t)

We do: store your files and the metadata needed to run the service

We do: keep basic security logs to prevent abuse

We don’t: sell your data • run ads • train AI on your content

We don’t: publish your vault or make it searchable

Smart privacy habits

HushVault helps a lot — and a few small settings in your phone/photo apps help even more.

Don’t share adult accounts with kids’ devices.
If a tablet is for kids, keep it signed into a kid‑only account.

Review Sharing / Partner Sharing.
Shared albums and partner sharing can surface media in places you don’t expect.

Turn on auto‑lock.
It’s the simplest “oops prevention” tool.

Keep your vault PIN different from your phone PIN.
Treat it like a separate lock.

Transparency: No web app can guarantee deletion from third‑party services (Google Photos, iCloud, etc.). HushVault focuses on safe private storage + clear cleanup guidance.