Privacy Policy

ZeroBox — Last updated: 31 August 2026

The short version. ZeroBox stores your photos and videos encrypted, only on your device. There are no servers, the app makes no network connection to send your content anywhere, and we — the developer — collect nothing about you and cannot see your files. This policy explains that in full.

1. Who we are and what this policy covers

This Privacy Policy describes how the ZeroBox mobile application (“ZeroBox”, “the app”) handles information. ZeroBox is developed and published by Anton Mykhailovych Bazna, an individual entrepreneur (ФОП) registered in Ukraine (Фізична особа‑підприємець Базна Антон Михайлович), operating under the name “Nexa Tools” (“we”, “us”, “the developer”), registered address: 133b‑57 Prospekt Bohdana Khmelnytskoho, Dnipro, 49000, Ukraine. It applies to your use of the app. It does not apply to any third‑party services (such as your device’s app store) that operate under their own policies.

2. The data we collect: none

ZeroBox does not collect, transmit, or receive any personal data. Specifically, ZeroBox has:

• No account and no sign‑up. We never ask for your name, email, phone number, or any identifier.
• No analytics or tracking. There are no analytics SDKs, no advertising, no tracking identifiers, no telemetry.
• No servers and no network use for your content. Your photos and videos never leave your device and are never uploaded to us or anyone else.

Because we collect no personal data, there is nothing about you for us to store, share, sell, or lose.

3. Your content stays on your device, encrypted

The photos and videos you add to ZeroBox are stored inside the app’s private storage on your device and are encrypted using AES‑256‑GCM. The encryption key is protected by your device’s secure hardware (the Android Keystore / Trusted Execution Environment) and by your PIN. As a result, the developer cannot access, read, or recover your content.

Important consequence: because encryption is genuine and the key never leaves your device, if you forget your PIN and have not saved your optional recovery key, your data cannot be recovered by anyone, including us.

4. Device permissions and why they are used

ZeroBox requests the following permissions solely to work with your own media on your own device. The data accessed through them is used only on the device and is never collected or transmitted:

• Photos and videos access (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO) — to let you select and import your photos and videos into the vault.
• Media management (MANAGE_MEDIA, optional) — if you grant it, to remove the original of an imported file from your gallery without a separate confirmation each time. This is entirely optional; without it, the app uses the standard system confirmation instead.

5. How we use, share, and disclose information

We do not use your information for any purpose because we do not receive any. We do not share or disclose any personal data to third parties, because we hold none. We do not sell data.

6. Payments (if you subscribe)

If ZeroBox offers a paid subscription, payment is processed entirely by your app store (Google Play or the Apple App Store) under their terms. We do not receive or store your payment card details. The store may share limited transaction information with us (such as whether a subscription is active) so the app can unlock paid functionality; this is governed by the store’s own privacy policy.

7. Data storage, retention, and deletion

All app data lives only on your device. You are in full control:

• Deleting an item in the app removes it from the vault.
• Uninstalling ZeroBox, or clearing its data in system settings, permanently removes the encrypted vault from your device.

We keep no copies, so there is nothing for us to retain or delete on our side.

8. International data transfers

None. Your content and any app data never leave your device, so no data is transferred across borders by us.

9. Security

Security is the core of ZeroBox. Content is encrypted with AES‑256‑GCM; keys are bound to your device’s secure hardware and your PIN; the app screen is protected against screenshots and preview capture. No security measure is perfect, and we describe the honest limits of our protections inside the app.

10. Children

ZeroBox is not directed to children and does not knowingly collect any information from anyone, including children under the age of 13 (or the equivalent minimum age in your jurisdiction).

11. Your rights

Under laws such as the EU General Data Protection Regulation (GDPR) and similar frameworks, you have rights over your personal data — including access, correction, deletion, restriction, objection, and portability. Because ZeroBox holds no personal data about you, there is no personal data for us to provide, correct, or erase. All content you store is under your direct control on your device. If you believe we hold personal data about you, you may contact us using the details below, and you have the right to lodge a complaint with your local data protection authority.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and post the current version at this address. Material changes will be reflected here before they take effect.

13. Contact us

If you have questions about this Privacy Policy, contact us at privacy@zeroboxapp.com.