Privacy Policy
Gumlock · Last updated: 2026-10-15
In one line — This app does not collect personal information. There is no account and no developer server. The passwords you save are encrypted on your device with your master password, and neither the developer, Apple nor Google can read them.
Information we collect
We collect no personal information. No name, email address, phone number, location, or contacts. There is no Gumlock account or sign-in (authorizing your Google account for the optional Google Drive sync only lets the app use your own Drive, and nothing reaches us), and the app contains no analytics or ads. The developer has no access to your vault.
If you email us, your address and message remain in our inbox; we delete them within one year of resolving the matter.
Where the data lives
Your vault (sites, usernames, passwords, notes, attachments and so on) is stored encrypted with AES-256-GCM on your device. The key is derived from your master password, and your master password is never stored anywhere. Decrypted content exists only in memory while the app is unlocked.
| What | Where | Who can see it |
|---|---|---|
| Vault (encrypted) | On your device | You, with your master password |
| The same vault, still encrypted (if iCloud sync is on) | Your own iCloud private database | You, with your master password |
| The same vault, still encrypted (if Google Drive sync is on) | The hidden app-data folder of your own Google Drive | You, with your master password |
| Encrypted backup files (if you export or turn on automatic backup) | Wherever you choose — a folder in the Files app, iCloud Drive, etc. | You, with your master password |
| Unencrypted CSV (only if you export it yourself) | Wherever you choose | Anyone who has the file — delete it after use |
| Shared account text (only if you use Share Account — you choose what is included) | The app and person you choose | Anyone who can see that chat or app — not encrypted |
| Vault key (if Face ID is on) | The device keychain — released only by Face ID | The device owner |
Face ID data is handled by iOS on the device; the app receives only a match / no-match result. The home screen widget shows no item information, only the date of the last backup.
When the app uses the internet
The app connects to the internet itself only if you turn on Google Drive sync. Purchases and iCloud sync are handled by iOS (Apple) on the app's behalf.
Purchases. Gumlock Pro is handled by the App Store. Payment details go to Apple only and never reach the app or the developer.
iCloud sync (optional, Pro). Used only if you turn it on. It uses the Apple Account already signed in on the device, and uploads only the encrypted vault file and attachments. Turning it off stops syncing; nothing is deleted.
Google Drive sync (optional, Pro). Used only if you turn it on. You authorize it with your own Google account (sign-in happens in Apple's secure sign-in sheet, so the app never sees your Google password), and it asks for a single permission, drive.appdata — a hidden folder only this app uses. It cannot read or change any other file in your Drive, and it does not ask for your name, email or profile. It uploads only the encrypted vault file and attachments, with random IDs as file names. So that you don't have to sign in again, the connection token Google issues is kept only in this device's keychain (never backed up or moved to another device). Disconnecting deletes the token and returns the permission to Google. It can sync the same vaults as Gumlock for Android.
Sharing with third parties
We do not hand your information to anyone. Only the following services handle data, each under its own policy.
What the app does not do
- Collect usage data, run analytics, show ads, or track you
- Share or sell data to third parties
- Require an account, or keep your master password
Retention and deletion
We hold nothing of yours. Everything below is yours to delete.
- Device — deleting the app deletes its vaults. To delete a single vault, use Settings > Vaults in the app.
- iCloud — Settings > Apple Account > iCloud > Manage Storage, then delete this app's data.
- Google Drive — in Google Drive > Settings > Manage apps, delete Gumlock's hidden app data. You can remove the app's access by disconnecting in the app or under Google Account > Security > Your connections to third-party apps & services.
- Backup and CSV files — delete them from the folder where you saved them.
There is no need to ask us to delete anything, because we hold nothing.
Children's privacy
This app is not directed at children, and we collect no personal information from anyone, children included.
Changes to this policy
If this policy changes, we update this page and the date above.
Contact
| Business name | Ggeomddakji |
|---|---|
| Registration no. | 413-21-02441 |
| support@ggeomddakji.com |