Data the Developer Receives
Hidden Room does not send KALEIDOSKY STUDIO LLC your contacts, contact fields, vault passcode, biometric information, clipboard contents, usage history, diagnostics, analytics identifiers, advertising identifiers, or device location. The app contains no advertising or analytics SDK and requests no Contacts, location, storage, camera, microphone, or broad package-discovery permission. Its Internet and network-state permissions are used only by native Google Play Billing for optional tips.
If you contact support outside the app, KALEIDOSKY STUDIO LLC receives the sender details and whatever information you choose to include. Do not send a vault passcode or private contact value. Support information is used only to respond, troubleshoot, secure the app, and meet applicable legal obligations. It is retained only as long as reasonably needed for those purposes.
Data Stored on the Android Device
You enter contact fields manually. Hidden Room stores them in authenticated, encrypted files inside the app's private no-backup storage. Each contact is encrypted using AES-256-GCM. A random vault key is protected jointly by the six-digit vault passcode and non-exportable Android Keystore key material bound to this app installation.
Hidden Room has no developer database, account, cloud synchronization, server backup, passcode recovery, or remote recovery service. Android backup and device-to-device transfer are disabled for every app storage domain. Copying the encrypted app files without their original Android Keystore authority is not sufficient to unlock the vault.
Android Keystore and the Android system process biometric authentication. Hidden Room receives only the cryptographic success result associated with its requested operation. It does not receive a fingerprint, face image, or biometric template.
Android's active keyboard receives the text you type, and an enabled accessibility service may be able to observe or operate visible interface elements. Hidden Room blocks ordinary paste, drag-and-drop, autofill, text selection, and keyboard-learning requests, but it cannot make a third-party keyboard or accessibility service trustworthy. Use only services you trust while the vault is open.
Hidden Room locally checks only its curated list of messenger package names so it can show which supported apps appear installed. It does not request broad app visibility, transmit the result, or scan the rest of the phone. Messenger choices and identifiers are stored inside the encrypted vault.
Address Suggestions
Postal addresses are stored with the encrypted contact. Address suggestions run only after you tap Search and confirm the exact typed query. Hidden Room passes that query to Android's system geocoder. Depending on the phone and its configured provider, Android may send the query to a network service governed by that provider's privacy policy.
Hidden Room does not request the device's location and does not send the rest of the contact or vault. You can type and save an address without using suggestions.
Clipboard and Other Apps
Data Transfers starts Off. Revealing a value stays inside Hidden Room. If you enable Data Transfers, a deliberate copy first locks the vault, marks the clip as sensitive where Android supports it, requests clipboard clearing after 30 seconds, and clears an unchanged Hidden Room-owned clip when the app can access it again.
A confirmed call, message, email, website, or messenger action locks the vault before sending only the selected recipient or destination to Android or the selected app.
Android and receiving apps ultimately control clipboard history, call history, messages, drafts, browser history, notifications, screenshots, backups, cloud services, and recipient devices. Hidden Room cannot erase information after it leaves the vault.
Voluntary Tips
Voluntary tips are processed only through Google Play Billing. Google Play shows the final localized price and collects the payment method. Hidden Room does not receive or store a card number, bank information, billing address, or Google account credentials.
To complete a tip, the app receives the selected product identifier, purchase state, and a temporary Google Play purchase token. It checks only that the product is one of Hidden Room's three tip products, waits until Play reports the purchase as completed, and consumes the purchase so the same tip can be chosen again.
Hidden Room does not persist the token, create a developer purchase history, send billing data to a developer server, or grant any entitlement. Hidden Room creates and connects its Billing client only while the Support screen is open, and ends the service connection when you leave it. Opening or unlocking the vault does not start it.
Tips are optional one-time purchases. They are not subscriptions or charitable donations and unlock no feature, content, badge, priority, service, or other benefit. Google Play's own privacy policy and purchase terms apply to the payment transaction.
Retention and Deletion
Vault records remain until you edit or delete them, uninstall the app, confirm Emergency Erase, reach an optional automatic-deletion interval, or reach an optional wrong-passcode erase threshold.
- Wrong-passcode erase is Off by default and can be set to 5, 10, or 20 failed vault-passcode entries.
- Automatic deletion is Off by default and can be set to 1 day, 3 days, 30 days, or 365 days without a successful vault unlock. Deletion runs after a correct passcode unlock when the trusted interval has elapsed, not simply when the app opens. A reboot or an untrusted clock transition can postpone deletion and does not itself authorize it.
- Emergency Erase first destroys decrypting Android Keystore material, then deletes encrypted files and resets local settings.
- Individual deletion removes the record from the next authenticated vault generation.
Emergency Passcode is optional where offered and starts Off. Android version 1.1.5 (9) does not offer it. The Android 1.2.2 release candidate includes it. Availability depends on the version installed. Enabling it requires the current vault passcode, then prepares and verifies a separate encrypted tutorial vault containing clearly fictional sample contacts. The real and tutorial vaults use independent identifiers, encryption keys, Android Keystore namespaces, integrity controls, and files in Android's storage excluded from backups. Biometric unlock, Automatic Contact Deletion, and wrong passcode erase are Off and unavailable while Emergency Passcode is armed. Disabling Emergency Passcode does not turn those protections back on automatically.
Entering the separately chosen Emergency Passcode on the lock screen permanently destroys the real vault's decrypting Android Keystore material and opens the already prepared tutorial vault without an erase confirmation or completion message. After activation, the Emergency Passcode becomes the tutorial vault's ordinary passcode, Emergency Passcode is Off, and the former vault and passcode cannot be recovered. A transition authority stored in Android Keystore makes an interrupted activation resume toward the tutorial vault instead of reopening the real vault or showing initial setup.
Anyone who enters or guesses the exact six digit Emergency Passcode can permanently destroy the real vault. It is intentionally recognized before ordinary retry delay and wrong passcode counting so it remains usable during coercion. Ordinary app lockout therefore does not protect that destructive code. Choose a code that is hard for anyone else to guess and understand that accidental entry cannot be undone.
Key-first deletion is designed to make old ciphertext inaccessible under normal Android security assumptions. It is cryptographic deletion, not a promise of physical or forensic erasure on a rooted, maliciously modified, or already-compromised device.
Security and Capture Limits
Hidden Room asks Android to block standard screenshots, recordings, overlays, obscured touches, and recent-app snapshots. Device manufacturers and a compromised operating system remain outside the app's control. No phone app can prevent an external camera, coercion, kernel or root access, malicious firmware, or capture performed outside Android's protected rendering path.
Emergency Passcode is designed for a coercive unlock, but it cannot guarantee that the feature or its use is undetectable. Someone who knows the expected contacts, a compromised Android device, an earlier filesystem or memory image, operating system artifacts, or information previously transferred outside Hidden Room may reveal that data was removed or that a tutorial vault is being shown. Its deletion is cryptographic within the stated platform assumptions, not a promise of physical flash, memory, backup, snapshot, or forensic erasure.
Tracking, Sale, and Advertising
Hidden Room does not track you across apps or websites, sell vault information, or share vault data with advertisers, data brokers, or analytics providers.
Children
Hidden Room is a general purpose private utility and is not directed to children. Its Google Play target audience is adults age 18 and over.
Changes to This Policy
If Hidden Room's data practices materially change, this policy and the Google Play disclosures will be updated before the changed behavior is released.
Contact
Hidden Room is provided by KALEIDOSKY STUDIO LLC. For privacy questions, use the Hidden Room support page: