Privacy policy
Short version: we can't see your files, we don't know who you are, and we don't want to. The only data that leaves the app is what's needed to sell you Pro.
Who we are
Brikwall ("the app") is published by Adam Davis ("we", "us"). Questions about this policy go to support@brikwall.app.
What stays on your phone
Everything you put in a vault (photos, videos, documents, albums, file names and thumbnails) is encrypted on your phone with keys derived from your pattern or recovery phrase. We never receive it, and we have no way to decrypt it. The same goes for break-in alert photos, which are encrypted on your phone with a key held by its security chip.
The app also keeps a few settings on your phone, outside any vault: your theme, whether break-in alerts or the disguise are on, the wrong-attempt counter and cooldown, and whether you've finished setup. These never leave your phone.
Your pattern is never stored anywhere. Your recovery phrase is shown to you once and never stored by the app.
What we don't collect
- No account, name, email address or phone number.
- No analytics, usage tracking or crash reports.
- No advertising ID and no ads. The app removes the advertising-ID permission.
- No location, contacts, calendar, or access to your whole photo library. You pick each item to import with Android's own picker.
Purchases: the only data that leaves the app
If you buy or restore Pro, two companies process the purchase:
- Google Play handles payment, under Google's privacy policy. We never see your card or Google account details.
- RevenueCat, Inc. checks that the purchase is genuine, under RevenueCat's privacy policy. The app sends RevenueCat a random, anonymous app ID (not linked to your name or email), the Google Play purchase token and product, the price and currency, the app version, your device model, Android version and language. Like any internet connection, it also reveals your IP address. RevenueCat may back up the anonymous ID to Google's Block Store, so your purchase survives reinstalling the app.
The app checks for purchases when it opens, so this connection happens even if you never buy anything, but it carries no purchase in that case. It never carries vault contents, patterns, keys, recovery words, file names or the number of vaults. The app is technically restricted so it cannot connect to any server other than RevenueCat's.
We use this information only to provide Pro, handle refunds and meet tax and legal obligations. Purchase records are kept as long as billing and accounting law requires.
Backups
Backups are made only when you ask. The app creates one encrypted file and hands it to the place you choose, such as Google Drive. That service stores it under its own terms. The file can be opened only with your recovery phrase; neither we nor the storage provider can read it.
Permissions
| Permission | Why | When asked |
|---|---|---|
| Camera | The in-vault camera, break-in photos (if you turn them on) and scanning a recovery card | The first time you use one of these |
| Microphone | Sound for videos taken in the vault | The first time you record video |
| Biometrics | Quick unlock with fingerprint or face (if you turn it on) | When you turn it on |
| Internet | Purchase checks with RevenueCat only | Not asked; granted at install |
| Google Play billing | Buying Pro | Not asked; granted at install |
Children
Brikwall isn't directed at children under 13, and we don't knowingly collect data from anyone, including children.
Your rights
Because we don't hold personal data linked to you, there's usually nothing for us to show, correct or delete. Uninstalling the app deletes everything it stored on your phone. If you'd like RevenueCat's purchase record deleted, email support@brikwall.app with your Google Play order number (it starts with GPA.), and we'll ask RevenueCat to delete it. Depending on where you live (for example, the EU, UK or California), you may have further rights under data protection law; contact us and we'll help.
This website
brikwall.app uses no cookies, analytics or third-party scripts, and its fonts are served from the same server. Our hosting provider may keep standard server logs (such as IP addresses) for a short time to keep the site running and secure.
Changes
If this policy changes, we'll update the date at the top and describe important changes in the app's release notes. We'll never start collecting vault contents: the app is built so that it can't.