Summary
- Enlock makes no network connections. There's no account, sync, analytics, advertising or crash reporting.
- Everything you add (scans, card details, people, tags) is stored only on your iPhone.
- Text recognition runs on your device through Apple's Vision framework.
- Data leaves your phone only when you share it or save a backup, and you choose where it goes.
- We can't see, recover or hand over your data, because we never have it.
1. Information we collect
None. Enlock (“the app”, “we”, “us”) doesn't collect, transmit, sell or share any personal information. The app contains no analytics, advertising or tracking SDKs, and it doesn't require or offer an account.
Apple may give developers aggregated, anonymous App Store statistics such as download counts, and crash reports from people who have opted in to share them with developers in iOS Settings. Apple controls these under the Apple Privacy Policy, and you can turn them off at any time.
2. Data stored on your device
To work, the app stores what you put into it locally on your iPhone:
| Data | Where it lives | Purpose |
|---|---|---|
| Items and fields (for example, card numbers, names, dates, notes, tags) | The app's private storage on your iPhone | Showing, searching and copying your items |
| Scanned and imported images, PDFs | The app's private storage on your iPhone | Showing and sharing the original document |
| People (names, relationship) | The app's private storage on your iPhone | Grouping items by person |
| PIN | iOS Keychain, “this device only”, stored as a salted PBKDF2 hash rather than the PIN itself | Unlocking the app |
| Recovery key | iOS Keychain, “this device only” | Opening encrypted backups and resetting your PIN |
| Settings (auto-lock, display choices, last backup date) | The app's private storage on your iPhone | Remembering your preferences |
None of this is sent to us or to anyone else. Like any app's data, the app's private storage may be included in your iPhone's own iCloud or computer backup if you have that turned on. Those backups are governed by Apple's terms and your settings. Keychain items marked “this device only” are not moved to another device through those backups.
3. Device permissions
The app asks for these permissions only when you use the related feature, and you can change them at any time in iOS Settings:
- Camera: to scan cards and documents. Images are processed and kept on your device.
- Photo Library: to import a picture of a card you already have. Only the photos you pick are read.
- Face ID: to unlock the app. Apple handles Face ID, and the app never receives your face data. It only learns whether the check succeeded.
4. Sharing and backups you start
The app doesn't share anything on its own. When you choose to share, it uses the standard iOS share sheet, print dialog or an on-screen QR code to send the fields or files you selected. Once you send something to another app, person or printer, that recipient's privacy practices apply. Fields marked as secret, like a CVV, are unticked by default.
When you tap Back up now, the app creates a single file encrypted with AES-256-GCM under a key derived from your recovery key, and you choose where to save it (Files, iCloud Drive, AirDrop, a computer, and so on). Nobody can open that file without your recovery key, including us.
Copied values go to the iOS clipboard as local-only, so they don't sync to your other devices through Universal Clipboard, and by default they clear automatically after 60 seconds. You can change this in Settings.
5. Security
Measures built into the app include an optional Face ID or PIN lock with auto-lock, Keychain storage restricted to this device, encrypted backups, blurring the app in the app switcher, and clipboard entries that expire. No method of storage is perfectly secure. Your data's safety also depends on your device passcode, keeping iOS up to date, and keeping your recovery key private.
6. Retention and deletion
Your data stays on your device until you delete it. You can delete individual items or people in the app. Deleting the app removes its private storage from your device. iOS may keep the app's Keychain entries (your PIN hash and recovery key) after the app is deleted. Other apps can't read them, and they're replaced if you set up Enlock again. Backup files you saved elsewhere stay wherever you put them until you delete them.
7. Children's privacy
The app collects no information from anyone, including children. Parents or guardians may use it to keep their children's documents. Those records stay on the parent's device like any other item.
8. Your rights
Depending on where you live, laws such as India's Digital Personal Data Protection Act 2023, the EU/UK GDPR or the California Consumer Privacy Act give you rights to access, correct, delete or move your personal data. Because we hold none of your data, you exercise these rights directly in the app. You can view, edit, delete and export (through encrypted backup or sharing) everything at any time. If you have a question about your rights, contact us using the details below.
9. This website
This website (enlock.app) is a static site hosted on Vercel. It sets no cookies and runs no analytics. Vercel, as the host, may log technical information such as your IP address for security and operations, under the Vercel Privacy Policy. The site loads fonts from Google Fonts, which receives your IP address when you visit, under Google's Privacy Policy. Your light or dark theme choice is saved in your own browser only.
10. Changes to this policy
If we change this policy, we'll update this page and the effective date above. If a change would let any data leave your device without your action, we'll ask for your clear consent in the app before it takes effect.
11. Contact
Enlock is developed by Neel Bhatt. For privacy questions or requests, email support@enlock.app. For anything else, write to hello@enlock.app. Please don't include any document numbers or personal details in your message.