Security Policy

1. Overview and Scope

Safety Photo+Video is designed to help keep private photos and videos protected. This Security Policy explains the security model used for Safety Photo+Video's optional encrypted cloud-backup service and the responsibilities that come with using it.

The zero-knowledge protections described on this page apply specifically to Safety Photo+Video encrypted cloud backup. Local vault storage, Apple iCloud storage or sync, and other platform-provided storage may use different security, encryption, and retention mechanisms.

Encryption helps protect backup content, but no security system can guarantee that data will never be lost, corrupted, delayed, or made unavailable. You should maintain an independent copy of important files where appropriate.

2. Encryption Password

The service can store encrypted key material needed for backup and restore, but that material is protected so that the user-controlled Encryption Password or recovery information is still required to unlock it. If you lose all required recovery information, your encrypted cloud backup may become permanently inaccessible. Our support team can help with account, subscription, backup, and restore issues, but cannot decrypt a zero-knowledge backup without the required user-controlled credentials.

Do not send your Encryption Password to our support team, by email, in screenshots, or through social media.

3. How Encrypted Cloud Backup Works

Safety Photo+Video uses authenticated encryption to protect supported backup content on the device before it is uploaded to our encrypted cloud-backup service. The app also protects the encryption-key material used for backup and restore. We intentionally keep this public policy focused on the security properties users need to understand rather than publishing low-level implementation details that may change as the product evolves.

4. Zero-Knowledge Cloud Backup

Our zero-knowledge cloud-backup design is intended to keep the content of protected backups unavailable to Safety Photo+Video without the user-controlled credentials required for decryption.

• Encrypted before upload — Supported media is protected on the device before being sent to our cloud-backup service.
• User-controlled decryption — Access to protected backup content requires the Encryption Password or recovery information controlled by the user.
• No decryption by support — Our support team cannot decrypt a zero-knowledge backup without the user-controlled password or recovery information required by the app.
• Operational data is separate — Zero-knowledge protection of backup content does not mean that we collect no account, subscription, diagnostic, or service information. See our Privacy Policy for details.

5. Backup Retention and Deletion

Encryption continues to protect retained cloud-backup content after a backup entitlement expires. Under our standard expired-subscription lifecycle, encrypted cloud-backup data is retained for 90 days after the backup entitlement ends and may be permanently deleted beginning on day 91.

Retention does not guarantee that a backup can always be successfully restored. Lost credentials, incomplete or corrupted backups, unsupported software, insufficient storage, service limitations, or other technical conditions may affect recoverability. For complete retention, deletion, and subscription rules, see our Privacy Policy and Terms of Service.

6. Security Best Practices

You can help protect your account and encrypted backup by following these practices:

• Choose a strong, unique Encryption Password
• Store your Encryption Password and any recovery information securely
• Enable biometric authentication or another supported device lock
• Keep your device operating system and Safety Photo+Video app updated
• Use trusted networks and devices when accessing or restoring private media
• Never share your Encryption Password with anyone, including our support team
• Maintain an independent copy of important files where appropriate

7. Security Contact

If you discover a security vulnerability, please report it responsibly to support@safetyphoto.app

Include detailed reproduction steps where possible, and do not access other users' data or disrupt services while investigating a potential issue.