Data the Developer Collects
Hidden Room does not send the developer your contacts, contact fields, passcode, Face ID information, clipboard contents, usage history, diagnostics, analytics, advertising identifiers, or precise location. The app contains no advertising or third-party analytics SDKs.
Data Stored on Your iPhone
Encrypted contact files and repairable metadata mirrors are stored in the app's protected container. A random key encrypts contact records. An iPhone device passcode is required and must remain enabled; iOS discards this Keychain protection if that passcode is removed, making the device-bound vault unrecoverable.
The six-digit vault passcode and an iPhone-passcode-protected, device-only Keychain secret jointly wrap the key and verify passcode guesses. A copy of the app container alone is insufficient to test passcodes or unwrap the vault key. Device-only, vault-bound Keychain records are authoritative for the active vault generation, retry state, automatic-deletion policy, and mutable security controls. Hidden Room does not provide cloud synchronization, server backup, account recovery, or passcode recovery.
Face ID is processed by iOS. Hidden Room does not receive facial data. When enabled, a separate Keychain item is bound to the current biometric enrollment; enrollment changes disable that item and require the vault passcode.
In iOS version 1.2.17 and later, swipe copying is available by default in an unlocked vault. An explicit right swipe writes only the selected value to the local iOS pasteboard for 30 seconds, with Universal Clipboard synchronization disabled. Hidden Room clears its own unchanged value when the vault locks. Other apps may read or retain it first. Hidden Room does not read or monitor clipboard content. Earlier versions require enabling Allow Sharing before copying.
Postal Addresses
Postal addresses are entered manually and stored with the encrypted contact record. Hidden Room does not query an address-search service, request Location permission, or hand an address to Maps or another address app.
In iOS version 1.2.17 and later, an explicit right swipe copies a masked postal address to the same local pasteboard for 30 seconds by default. Earlier versions require enabling Allow Sharing first. Hidden Room provides no address app opening action.
Data You Intentionally Send to Other Apps
External sharing starts Off and, in iOS version 1.2.17 and later, is separate from swipe copying. Enabling Allow Sharing makes calls, messages, email, websites, and messenger destinations available. Each external handoff requires confirmation and transfers the selected value after Hidden Room locks. Postal addresses have no external app handoff.
After a copy or handoff, that information may be read or retained in another app's clipboard history and may appear in call history, messages, drafts, sent items, browser history, carrier or provider records, notifications, backups, screenshots, cloud services, or recipient devices. Hidden Room cannot erase information held outside its own vault.
Retention and Deletion
Wrong-passcode erase is Off by default. After verifying the current passcode, you may opt into permanent vault erasure after 5, 10, or 20 wrong app-passcode entries. Anyone with access to the app can intentionally reach that limit and cause unrecoverable data loss. Wrong entries persist across relaunches; Face ID failures do not count, and a successful passcode or Face ID unlock resets the count.
Vault data otherwise remains until you edit or delete it, confirm Emergency Erase, reach an optional automatic-deletion deadline, or choose Delete App in iOS. Automatic Contact Deletion is Off by default and can be set to 1 day, 3 days, 1 month, or 1 year without a successful unlock. When a trusted current policy is due, Hidden Room destroys the old vault key and resets the app the next time it opens, before showing the passcode or Face ID screen. iOS cannot perform this while the app is terminated.
Within one boot, Hidden Room uses monotonic system uptime so changing the wall clock cannot trigger deletion. A reboot or other untrusted clock transition never authorizes deletion; the next successful passcode unlock establishes a new baseline.
Individual deletion removes records from the active vault. Automatic expiry and Emergency Erase destroy relevant current key material and are designed to make old filesystem ciphertext inaccessible under normal iOS security assumptions. This is cryptographic deletion, not a guarantee of physical or forensic erasure on a compromised device.
Deleting the app removes its vault container, but iOS may retain device-only Keychain items. A later fresh install does not silently delete surviving key material: it stays locked until the user explicitly confirms starting a new vault and permanently abandoning recovery of the missing one. Offload App keeps the app's documents and data, so reinstalling an offloaded copy can restore access to the same vault after authentication. Remove from Home Screen does not delete the app or its data.
Tracking and Sharing
Hidden Room does not track you across apps or websites. The developer does not sell personal information and does not share vault data with data brokers, advertisers, or analytics providers.
Security Limits
No software can guarantee absolute security, especially on a jailbroken, maliciously modified, or already-compromised iPhone. Information intentionally transferred outside Hidden Room is no longer protected by the vault.
Capture Response is always on. Hidden Room conceals and locks for detected recording or mirroring, uses capture-protected rendering for contact text where supported, and locks after iOS reports a screenshot. iOS reports a still screenshot after creating it, so the app cannot retract that file. A device-wide screenshot prohibition requires an administrator-managed iPhone policy.
Voluntary Support Communications
If you contact support outside the app, the developer receives the sender address and whatever device, app-version, and incident information you choose to include. Do not send your vault passcode or private contact values.
Support information is used only to respond, troubleshoot, protect users and the app, and meet applicable legal obligations. It is not used for advertising or cross-app tracking and is retained only as long as reasonably needed for those purposes. You may request deletion through the same support channel, subject to applicable legal obligations.
Optional Tips
Hidden Room offers optional consumable tips that support continued development and maintenance. Tips are one-time App Store purchases. They do not unlock features, start a subscription, or represent a charitable donation.
Apple processes these purchases under its App Store terms. KALEIDOSKY STUDIO LLC does not receive your payment card details. Apple's handling of purchase and payment information is governed by Apple's privacy policy and your App Store account settings.
Changes to This Policy
If Hidden Room's data practices materially change, this policy and the App Store privacy disclosures will be updated before the changed behavior is released.
Contact
For privacy questions, use the Hidden Room support page: