Hidy VaultHow Hidy Vault protects your files
Encryption on your device, with boundaries you can understand.
What is encrypted
Hidy uses AES-256-GCM for file contents, names, thumbnails, folders and notes. A random vault key protects the stored data. The pattern, a device secret stored in Keychain, and PBKDF2/HKDF key derivation are used to unlock local access.
Locking drops the active vault session. The app covers its content when inactive and locks when backgrounded. These protections do not make an unlocked or compromised device safe in every situation.
Local access and recovery are different
The local pattern unlock depends on this device's Keychain secret. An encrypted backup and a valid recovery phrase provide the separate way to restore on another device. Keep the phrase outside the vault it protects.
Optional cloud copies
Backup, sync and sharing use Apple's CloudKit. Vault contents are encrypted on your device before upload. Apple handles the iCloud account and service. Local storage still exposes approximate file sizes and vault counts to someone who can examine the app container.
What sharing can and cannot undo
Revoking a participant stops future sharing access after the cloud service processes the change. It cannot erase a copy already downloaded or exported by the recipient. A readable export also leaves the encrypted vault's protection.
Data and purchases
The app has no Hidy identity account, advertising SDK or analytics SDK. Optional cloud features, Apple purchases and Polar license activation still involve external services. See the privacy policy for those flows.
Practical limits
Encryption is not a promise of forensic invisibility, guaranteed memory zeroization or protection from every form of coercion. Hidy has functional regression testing; it has not received an independent cryptographic security audit. Save backups and treat the recovery phrase as a secret.