Last updated and effective: October 4, 2026

This policy explains how Arcula, provided by Michael Silvester (“we”), handles information. For privacy questions, contact MichaelSilvesterCN+Arcula@gmail.com.

1. Overview

Arcula is a private photo vault that encrypts photos and videos on your device. It requires no account, provides no developer-operated cloud storage, integrates no advertising, tracking, or behavioral analytics services, and does not sell personal information. The library is excluded from iCloud sync and device backups.

When you export, transfer through a browser, select cloud files, or use Apple purchases, the relevant content passes to the recipient device or service according to your actions. If you send a support email, we receive the information in that email.

2. Information processed locally

• Media and organization: Imported or captured photos, videos, Live Photos, GIFs, thumbnails, filenames, formats, sizes, capture dates, embedded metadata, folders, favorites, and deletion status.
• Settings and security: Language, appearance, import preferences, Unlock Method and Decoy Passcode settings, folder protection information, password hints, and encryption keys or verification material. Keys and related credentials are managed through local mechanisms including the system Keychain. Do not put sensitive information in password hints.
• Intruder Log: Times, types, and counts of events such as failed unlocks or entry using a decoy passcode, plus photos captured when Intruder Photos is enabled and camera access is granted. Photos are encrypted locally, are not automatically sent to the developer, and are not used for facial recognition.
• Purchase status: StoreKit provides product information, transaction verification results, subscription expiration, and entitlement status to unlock Arcula Pro. Apple processes payments; we cannot access card numbers or complete payment credentials.

To display, play, or export content, the app decrypts it as needed and may create temporary files. Related plaintext caches are cleaned up when the app locks or enters the background. Copies already saved to other apps, Photos, or recipient devices are outside Arcula’s control.

3. System permissions

• Photos: Import selected media, read Live Photo resources and capture dates, and delete imported originals from Photos after your confirmation. Add access saves media you choose to export to Photos.
• Camera: Used for Private Camera and Intruder Photos when enabled. Capture timing depends on feature settings, permission, and device state.
• Microphone: Records audio for videos taken with Private Camera.
• Local Network: Enables Browser Import and Export to Other Devices on the same Wi-Fi network.
• Face ID / Touch ID: The system authenticates you to unlock the app or encrypted folders. Arcula receives the result and cannot access face or fingerprint templates. This is separate from taking intruder photos with the camera.

Manage permissions in system Settings. Refusing permission affects the corresponding feature. If selected photos or files are stored in iCloud or another file provider, the system may download them through that service.

4. Browser transfers and exports

While a transfer feature is open, Arcula serves a local HTTP page. Other devices connect using the displayed address and credentials. Media travels directly between devices without a developer server; file contents, filenames, requests, and network addresses are processed as needed for the connection.

HTTP does not encrypt the connection. Encryption at rest does not mean transfers are encrypted. Use a trusted network, protect access credentials, and close the transfer screen when finished. Ordinary media exported to Photos, another app, or a browser is no longer protected by Arcula’s vault encryption.

5. Encrypted Backup and retention

Arcula Pro’s Encrypted Backup creates a backup file at your request, saved to a location you choose. If you choose iCloud Drive or another cloud service, that service stores the file under its own privacy policy. This is not automatic cloud sync by Arcula.

The backup password may be empty. With an empty password, anyone holding the file can restore its contents without a password. Set a password and keep it safe. The app does not save backup passwords, and we cannot recover them. Locked encrypted folders and their contents are omitted from backups, as are items in Recently Deleted. Check the backup notices and results.

Local media normally remains until you delete it. With Recently Deleted enabled, deleted items are retained for 30 days before the app can purge them; you can permanently delete them earlier. With this feature disabled, deletion immediately removes items permanently. Intruder Log entries can be deleted in the app. Settings and caches are retained or cleared as needed for their functions.

Deleting the app removes its local private space. Because the library and keys are excluded from device backups, you cannot rely on system backups to recover them. Save a valid backup or export the media you need before deleting the app or switching devices. External copies, system Keychain items, and Apple purchase records are managed by the respective systems or services.

6. Sharing and support email

We do not share your library information for advertising or marketing. Apple handles purchases, system permissions, and related platform services. Recipient devices, file providers, cloud storage, or sharing destinations you choose process content you explicitly send to them.

When you contact support, we and the email provider process your email address, message, and attachments to reply, troubleshoot, and maintain necessary service records. We retain them only as needed to resolve the issue and meet applicable legal obligations. Do not send passwords, keys, private media, or complete backups.

We may disclose information we actually hold when legally required, but cannot access encrypted media stored only on your device. Third-party services may process information outside your region; consult their policies.

7. Your choices and security

You can view, export, or delete media and Intruder Log entries, change security settings, revoke system permissions, and manage subscriptions through your Apple Account. Arcula has no developer account to delete. For information you send by email, contact us to request access, correction, deletion, or other rights available under applicable law.

Local encryption, the system Keychain, and system authentication reduce unauthorized access risks but cannot guarantee absolute security. Protect your device, passwords, and backups, and manage exported copies carefully. We cannot remotely recover permanently deleted content or lost passwords.

8. Minors and policy updates

Arcula is not specifically designed for children. Minors should use it with a guardian’s guidance. If you believe a child has provided personal information through support email, contact us.

We will update the date on this page when features or information practices change. Material changes will be communicated appropriately, with consent obtained where required by law.

9. Contact and related links

Contact: MichaelSilvesterCN+Arcula@gmail.com

• Terms of Use
• Technical Support