Privacy Policy
Stillbox ("us", "we", or "our"), operated by 合肥纪念谷科技有限公司, provides the Stillbox mobile application (the "Service"). Google Play package name: com.jng.mixbofangqi. Store listing title: Private Photo Vault - Stillbox (titles may vary by language or locale).
This page explains how we access, collect, use, retain, and delete information when you use the Service. By using the Service, you agree to this Privacy Policy.
What the Service does
Stillbox is a local private photo and video vault. You can import media into an encrypted vault on your device, unlock it with a PIN (and an in-app calculator gate), optionally use biometrics where the device supports it, browse and export items, use a recycle bin, and create encrypted backups to a location you choose. Unlocking and browsing are ad-free in the current Google Play build. Import, browse, export, and recycle-bin access are not gated behind membership.
Definitions
Service — the Stillbox mobile application.
Vault Content — photos, videos, and related items you import into or create inside the vault on your device.
Personal Data — information relating to an identified or identifiable individual.
Usage Data — technical information collected automatically when you use the Service (for example device type, OS version, diagnostic events).
Types of Data Accessed and Collected
Vault Content (on your device)
Vault Content is stored on your device, encrypted with AES-256-GCM (Android EncryptedFile / AES256_GCM_HKDF_4KB). We do not operate a user-account cloud that stores your Vault Content. Optional encrypted backups are written only to a storage location you select; those backups are not uploaded to our servers as part of the core product.
There is no account system with us for the vault, and no email-based PIN reset. Access depends on the PIN / unlock method you set on the device (and, for portable backups, the recovery code you keep).
App permissions (current Google Play build)
- Internet — for optional Google Play Billing flows and ordinary network needs of shared libraries; core vault media is not synced to our cloud
- Vibrate — optional haptic feedback
- Read external storage (Android 12 and below, maxSdkVersion 32) — legacy fallback for selecting media to import; newer Android versions use the system Photo Picker where applicable
- Biometric / fingerprint — optional unlock when you enable it and the device supports it
Advertising ID related permissions are removed from the current Play build configuration.
Settings and local app data
PIN-related unlock state, preferences, vault indexes, and decrypted caches used while the app is unlocked are kept on your device. When you leave the app, the current build re-locks (if a PIN is set) and clears decryption caches from memory as designed.
Purchases / membership
Optional Pro / membership (product id placeholder private_player_pro) is billed through Google Play Billing. We do not collect or store your payment card details. Google processes the purchase under Google’s policies. We receive purchase / entitlement status needed to unlock optional features. Membership does not unlock access to your own Vault Content for import, browse, export, or recycle bin — those remain available without membership in the current product design.
Support communications
If you email us for feedback or support, we receive the address and content you send so we can reply.
Advertising and analytics SDKs
The current Google Play build is configured with ads disabled (adClose = true). Shared libraries may still include advertising or analytics SDK components. If those components process device identifiers or diagnostic Usage Data, their use is limited to what the build enables and to operating or securing the Service. Unlock and browse are without ads in this build. If advertising is turned on in a future release, we will update this policy before that change.
Use of Data
- To provide local vault import, encryption, browse, export, recycle bin, and backup/restore
- To authenticate unlock via PIN / calculator gate / biometrics you enable
- To process optional membership entitlements via Google Play
- To provide customer support when you contact us
- To maintain, secure, and improve the Service
Data Retention
- Vault Content: Remains on your device (and in any backup files you create at locations you choose) until you delete those items, clear app storage, uninstall, or delete the backup files yourself. Recycle-bin items follow the in-app retention period (currently 30 days) before permanent removal from the bin.
- No operator cloud vault: We do not host a cloud copy of your Vault Content for the core features described above, so we do not set a cloud retention period for that content.
- Purchase records: Held by Google Play under Google’s retention practices; we keep only the entitlement state needed to unlock optional features on the device.
- Support emails: Kept as long as reasonably needed to handle your request, then deleted or anonymized when no longer required.
Data Deletion
- In the app: Delete vault items or empty the recycle bin using in-app controls.
- On device: Clear the app’s storage in Android settings, or uninstall Stillbox to remove app-local vault data on that device.
- Backups: Delete backup files from the storage location you chose. We cannot delete files that exist only on your storage.
- Subscriptions: Manage or cancel Google Play subscriptions in Google Play subscription settings. Uninstalling the app does not automatically cancel a subscription.
- Deletion request to us: Email jiniangu2024@gmail.com with subject “Data deletion request”. Because Vault Content is stored on your device (and optional backups you control) and not in a user account on our servers, we typically cannot remotely erase on-device vault data; we will confirm that, guide you to on-device deletion, and delete related support correspondence we hold. We aim to respond within 30 days.
Children’s Privacy
The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect Personal Data from children. If you believe a child has provided us information via support email, contact us and we will delete it.
Security
Vault media on device uses AES-256-GCM encryption as implemented in the current build. No method of electronic storage or transmission is 100% secure. Protect your PIN and any recovery code; we cannot reset a forgotten PIN by email.
International users
If you contact us by email, your message may be processed where we operate support (which may differ from your country). Core Vault Content for the features above is not uploaded to our servers.
Changes
We may update this Privacy Policy by posting a new version on this page. Changes are effective when posted.
Contact Us
Questions about this Privacy Policy: jiniangu2024@gmail.com