Privacy Policy
Effective June 5, 2026
The short version
GemBoxer collects nothing. No accounts. No cloud. No analytics. No crash reports. No telemetry. Your files, folders, and locked vaults stay on your device and are never transmitted anywhere.
Data collection
We collect no personal data. GemBoxer does not require account registration and has no backend server to send data to. The app contains no analytics SDKs, no crash reporting libraries, and no telemetry of any kind.
File storage and encryption
Files in locked folders are encrypted at rest using AES-256 GCM before being written to your device's storage. Decryption happens in memory only — plaintext never touches your file system outside of the locked vault. Encryption keys are derived locally and never transmitted.
PIN-locked folders
PIN-protected folder keys are derived from your PIN using PBKDF2. The derived key is not stored in recoverable form. After 3 failed PIN attempts, the folder's encrypted files are permanently deleted and the keys are destroyed. There is no recovery mechanism — this is by design.
File sharing
File sharing only transmits data you explicitly choose to share. GemBoxer does not upload files to any server without your direct action. Shared files are sent directly — no intermediate server storage unless you choose a cloud-based share method.
Screenshot and clipboard protection
When a locked folder is open, GemBoxer programmatically blocks the OS screenshot API and suppresses your content from appearing in the recent apps switcher. If you background the app while in a secure folder, the clipboard is wiped automatically.
Third-party services
GemBoxer does not integrate with any third-party advertising networks or data brokers. No SDK from any external company is included in the app for data collection purposes.
Children's privacy
GemBoxer does not collect data from anyone, including children under 13. No personal information is gathered at any point.
Changes to this policy
If this policy changes materially, the updated version will be posted here with a new effective date. Since we collect no data, changes are unlikely to affect you in any practical way.
Permissions
The app requests access to your device's file storage solely to allow you to browse and manage files. No file content is transmitted outside your device without your explicit sharing action.
Data deletion
All data stored by GemBoxer — files, folder structure, locked vault contents, and encryption keys — resides exclusively on your device. Uninstalling the app permanently removes all of this data. There is no server-side data to delete.
Contact
Questions about this policy? Reach us at support@gemboxer.app.