Privacy Policy

Last updated: June 2026

1. Who we are

PixValt ("we", "our", "us") is an Android application for encrypted photo and video storage, operated from India. This Privacy Policy explains what information we collect when you visit pixvalt.com and when you use the PixValt app.

2. Information we collect

2a. This website (pixvalt.com)

When you join our waitlist we collect:

• Your email address — to notify you when the app launches and send occasional product updates.
• Basic analytics via Google Analytics 4 — page views, referral source, approximate country. This data is aggregated and not tied to your identity.

We do not sell your email. We do not send marketing emails unrelated to PixValt.

2b. The PixValt app

PixValt is designed to collect the absolute minimum:

• Your media files — photos and videos you import are encrypted on your device and never sent to PixValt servers. We have no server that receives your files.
• Your PIN — your 6-digit encryption PIN never leaves your device. It is used locally to derive the AES-256 key and is never stored in plaintext.
• Google Drive — if you enable Drive backup, your already-encrypted files are uploaded to your own Google Drive account via Google's APIs. The files are encrypted before upload; PixValt cannot read them and neither can Google.
• Crash reports — if enabled, anonymised crash logs may be sent to help us fix bugs. These contain no file content, no media, and no personal data.

3. How your encryption key works

PixValt derives your AES-256 encryption key from your 6-digit PIN using PBKDF2-HMAC-SHA256 (100,000 iterations). This process runs entirely on your device. Your PIN and key are never transmitted anywhere. This means:

• Even if someone obtained your encrypted files, they cannot read them without your PIN.
• We cannot recover your files if you forget your PIN — there is no server-side key.
• If you restore from Google Drive on a new device, the same PIN produces the same key and your files are accessible immediately.

4. Third-party services

• Google Drive API — used only when you choose to back up. Governed by Google's Privacy Policy.
• Google Analytics 4 — used on this website only. No analytics SDK is included in the app.
• Beehiiv — used to manage our email waitlist. Your email is stored in Beehiiv's systems subject to their privacy policy.

5. Data retention

Waitlist emails are retained until you unsubscribe or request deletion. App data lives entirely on your device and in your own Google Drive — we hold no copy of it.

6. Your rights

You can request deletion of your waitlist email at any time by emailing hello@pixvalt.com or clicking Unsubscribe in any email we send you.

7. Children

PixValt is not directed at children under 13. We do not knowingly collect information from children.

8. Changes to this policy

We may update this policy as the app develops. We will notify waitlist members of material changes by email before they take effect.

9. Contact

Questions? Email us at hello@pixvalt.com.