Privacy policy
Last updated
This policy covers the Silo app for iOS and Android and this website, https://silo-private-vault.fyi. “We” and “us” mean the developer of Silo, named below.
The short version
- Your photos, videos and files are encrypted on your phone. We never receive them, their names, your PIN or your recovery phrase.
- Silo has no accounts, no ads, and no tracking across other companies’ apps or websites. We do not sell your data.
- Purchases are recorded under a random app user ID. We do not know your name or email address from a purchase.
- Diagnostic data (device model, system and app version, performance numbers, error reports) is sent only if you say yes during setup. You can turn it off in Settings at any time. Paid features never depend on it.
- If you turn on backup, your vault is encrypted on your phone before it is uploaded to your own cloud storage. We cannot open it.
- This website sets no cookies and uses no analytics.
Who we are and how to contact us
The app is published by [TODO: legal name], [TODO: country]. For any privacy question or request, email pranjal.util@gmail.com.
[TODO: postal address, if required]
What never leaves your phone
Silo does not collect or receive any of the following:
- your photos, videos and files, and their contents
- file names, album names, file paths and item identifiers
- screenshots of the app
- your PIN, passphrase, recovery phrase and encryption keys
- exact counts of the items in your vault (at most a size range)
- which vault is open, and whether you have any other vault or an Emergency PIN, or have used one
- the cloud account you use for backup
Your files are encrypted on your phone before they are written to storage. Silo does not write a decrypted copy of a photo or video to your phone while you view it. Locking Silo clears its keys from memory.
What we collect and why
| Data | Purpose | Processor | Legal basis or consent | Retention |
|---|---|---|---|---|
| Purchase history and subscription status, under a random app user ID | Unlock paid features, restore purchases, manage subscriptions | RevenueCat, with Apple App Store or Google Play | Needed to provide what you bought (contract). Not optional if you buy | [TODO: retention period, to confirm against the RevenueCat account settings] |
| Device model, operating system version, app version | Find and fix problems that affect certain phones | Sentry | Your consent, given during setup and withdrawable in Settings | [TODO: retention period, to confirm against the Sentry project settings] |
| Performance numbers: start time, unlock time, scroll smoothness, import and backup speed | Make the app faster | Sentry | Same consent | Same as above |
| Error reports (the type of error and its technical trace only; no messages that could hold file names) | Fix bugs | Sentry | Same consent | Same as above |
Native crash reports are switched off. The app does not collect your name, email address, phone number, contacts, location or advertising identifier.
[TODO: confirm before release that the app build matches this table; the diagnostics code was not yet in the app when this draft was written.]
If you ask for help by email (see Feedback), we also receive whatever you put in that email.
Diagnostics: your choice
During setup, Silo asks once whether you want to share diagnostic data. The two choices are presented equally. You can change your mind at any time in Settings by turning the diagnostics switch off, and Silo stops sending data. If you say no, nothing in the Diagnostics rows of the table above is sent. Paid features never depend on this choice.
Purchases
Silo’s paid plans are sold through the Apple App Store and Google Play. The store handles payment. We never see your card or payment details, your billing address or your store account email.
To unlock paid features, Silo gives each installation a random app user ID, and RevenueCat links that ID to the purchases the store reports. RevenueCat holds this purchase record and tells the app which features to unlock. It does not receive your name or email address from Silo.
Backup
Backup is optional. When you turn it on, Silo encrypts your vault on your phone, then uploads the encrypted copy to cloud storage that belongs to you: your Google Drive on Android, and iCloud on iOS once available. The copy is stored in a folder named “Silo backup”.
We have no access to that storage and no key to decrypt the copy. Only your recovery phrase can open it. Google or Apple store the encrypted copy under your own account and their own privacy policies.
Feedback by email
The “send feedback” option in the app opens your own email app with a message addressed to us. Nothing is sent until you press send in your email app. We receive only what you choose to write or attach, and your email address as part of the email. We use it to reply, and keep it as long as needed to deal with your message.
This website
The website is a set of static pages hosted on Cloudflare. To deliver pages and protect against abuse, Cloudflare processes visitors’ IP addresses and basic request details. We do not set cookies, run analytics or show ads, and the fonts are hosted on the site itself, so your browser does not contact a font provider.
What we do not do
- We have no accounts, and we do not ask for your name or email to use the app.
- We show no ads and share no data for advertising.
- We do not sell your data.
- We do not track you across other companies’ apps or websites.
Who processes data for us
| Processor | What for | Privacy policy |
|---|---|---|
| RevenueCat | Purchase records and unlocking paid features | https://www.revenuecat.com/privacy |
| Sentry | Diagnostics, if you agree | https://sentry.io/privacy/ |
| Apple | App Store payments; iCloud for backup on iOS once available | https://www.apple.com/legal/privacy/ |
| Google Play payments; Google Drive for backup on Android | https://policies.google.com/privacy | |
| Cloudflare | Hosting this website | https://www.cloudflare.com/privacypolicy/ |
[TODO: confirm each link is the current policy before release.]
We use these providers only for the purposes above. Apple and Google also act as independent controllers for their own stores, your device and your cloud storage.
International transfers
Our processors may process data in countries other than yours, including the United States. Where the law requires safeguards for such transfers, we rely on the safeguards our processors offer, such as standard contractual clauses. [TODO: confirm with each processor’s data processing terms.]
How long we keep data
- Purchase records and diagnostic data: [TODO: retention periods] and then deleted or anonymised.
- Emails you send us: as long as needed to answer you, then deleted.
- Data on your phone: until you delete it or uninstall Silo.
- Your cloud backup: until you delete it from your own cloud storage.
Your rights
Depending on where you live (for example under the GDPR or UK GDPR in Europe and the UK, or the California Consumer Privacy Act), you may have the right to:
- ask what personal data we hold about you and get a copy
- ask us to correct or delete it
- object to or restrict how we use it
- withdraw consent you have given, at any time, without affecting what happened before
- complain to your local data protection authority
We do not sell or share personal data for cross-context advertising. We do not treat you differently for using these rights.
How to use your rights
Email pranjal.util@gmail.com. Because Silo has no accounts, we hold nothing that identifies you by name. To find diagnostic or purchase records, we need you to give us your random app user ID, or a purchase receipt or order number from the store. Without one of these, we cannot find your records. [TODO: the app must show this ID in Settings before release, or remove this option] We may ask you to show that the ID or receipt is yours. We will reply within the time the law requires [TODO: confirm response time]. See also the page Delete your data.
You can withdraw diagnostics consent yourself in Settings. Purchase records kept by Apple and Google are governed by those companies, and you can request them from the store.
Children
Silo is not directed at children under 13, or under the minimum age in your country. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.
Security
Your files are protected by encryption done on your phone, using modern, published methods. The file format is fully documented. We use reputable processors and collect little data. No system is perfectly secure, and we cannot recover your files if you lose your PIN and your recovery phrase.
Changes to this policy
When we change this policy, we update the date at the top of the page and list the change on this page. If a change affects what we collect, we ask for your consent again where the law requires it.
Contact
Email pranjal.util@gmail.com.