KinetiLock Privacy Policy Last Updated: September 13, 2026 KinetiLock is a privacy-focused vault application designed to keep private content on the user's device. This Privacy Policy explains how KinetiLock handles information and how its privacy and security features operate. Data Controller Berkay DASTAN Email: dastanberkay@gmail.com 1. Data Collection KinetiLock does not operate a user-account server or cloud storage service for vault content. KinetiLock does not: - Upload your vault content to developer-operated servers. - Use advertising SDKs. - Use third-party analytics SDKs. - Track users for advertising purposes. - Collect location information. - Sell personal data. - Share vault content with advertising companies. Vault content is stored locally on your device. 2. Vault Content KinetiLock may allow you to locally store: - Notes - Photos - Videos - Files and PDFs - Voice notes - Folders - Favorites and related local metadata - Local Security History Vault content is stored in encrypted form within the application's local storage. KinetiLock does not upload this content to a developer-operated server. 3. Real Vault and Decoy Vault KinetiLock may provide two separate privacy areas. Real Vault: Accessible only through the user's Real Vault password. Decoy Vault: May be accessed using the Decoy password, Face ID, or the configured hidden clock code. Face ID and the hidden clock code do not unlock the Real Vault. The Real Vault and Decoy Vault are handled as separate security namespaces. 4. Passwords and Password Recovery KinetiLock does not store your Real Vault password in plaintext, and the developer does not have access to your password. If you forget your Real Vault password, KinetiLock cannot recover access to the existing Real Vault content. KinetiLock does not provide: - Email password recovery. - Cloud password recovery. - Real Vault recovery through Face ID. - Real Vault recovery through the hidden clock. - A developer-accessible recovery backdoor. If the password is forgotten, you may choose to completely reset KinetiLock's local application data and create a new vault. A full reset is irreversible. 5. Face ID KinetiLock may use Apple's LocalAuthentication framework for device-owner authorization and privacy features. Under KinetiLock's current privacy model, Face ID may open the Decoy Vault. KinetiLock does not receive or store your biometric data. Biometric authentication is performed by Apple on the device. 6. Hidden Clock The hidden clock is an optional privacy feature. The correctly configured hidden clock code opens only the Decoy Vault. The hidden clock: - Does not unlock the Real Vault. - Does not reveal the Real Vault password. - Is not a Real Vault recovery mechanism. 7. Camera, Photo Library and Microphone KinetiLock may request system permissions only when the related feature is used. Camera: For capturing photos or videos inside the app. Photo Library: For importing photos and videos selected by the user. Microphone: For recording voice notes or video. Face ID: For local biometric authorization. Content accessed through these permissions is not uploaded to developer-operated servers. 8. Share Extension KinetiLock may provide an iOS Share Extension for importing supported content from the system share sheet. Shared content is staged securely on the device before being imported. The Share Extension is not given the Real Vault password or Real Vault encryption key. 9. Security History KinetiLock may record limited security-related events locally on the device. Security History is not sent to KinetiLock servers. Passwords, encryption keys and the actual hidden clock code are not stored in Security History. 10. Encrypted Backup and Restore KinetiLock may allow users to create encrypted backup files. Backups are protected with a separate password selected by the user. The backup password: - Is not known by KinetiLock. - Cannot be recovered by the developer. - Is required to restore the encrypted backup. If the backup password is forgotten, the encrypted backup cannot be restored. Backup files exported outside the KinetiLock application sandbox are under the user's control and responsibility. 11. Temporary Files Certain media playback, preview and system integration features may temporarily require decrypted files on the device. Such files are stored in temporary locations, protected using appropriate iOS file-protection mechanisms and removed through the application's cleanup procedures. 12. Apple StoreKit and Purchases KinetiLock Premium purchases are processed through Apple's App Store and StoreKit. KinetiLock does not directly receive or store your payment-card information. Apple may process purchase-related information under Apple's own privacy policies. 13. Free and Premium Access KinetiLock may provide limited free access to Real Vault functionality. The current free tier allows up to 10 user-created Real Vault items in total. Premium purchase options may include: - Monthly subscription - Annual subscription - One-time Lifetime purchase Expiration of a Premium subscription does not automatically delete existing vault content. Creation of new Premium-only content or use of certain advanced features may require active Premium access. 14. Tracking and Advertising KinetiLock does not: - Track users under Apple's App Tracking Transparency framework. - Use third-party advertising networks. - Build advertising profiles. - Sell personal information for advertising purposes. 15. Children's Privacy KinetiLock is not designed to knowingly collect personal information from children. Use of the app should follow the App Store age rating and applicable local law. 16. Data Deletion Using KinetiLock's full reset feature may delete the application's locally stored vault data, encryption keys, settings and Security History. Backup files previously exported by the user outside the application's sandbox are not automatically deleted. 17. Data Protection Rights Where applicable, users may contact the developer regarding rights available under applicable data-protection laws, including the GDPR and Turkish data-protection law. KinetiLock's core vault architecture operates locally and does not transmit vault content to the developer. 18. Changes to this Policy This Privacy Policy may be updated as the application, applicable laws or security practices evolve. The latest version will be published on this page. 19. Contact Berkay DASTAN Email: dastanberkay@gmail.com Support: https://berkaydastan.github.io/KinetiLock/support.html