Privacy & Data
Stillock has no accounts, analytics, advertising or crash reporting, and Odd Omens has no server for it. The app contains no networking code. Your vault stays on your device, plus your own iCloud Drive if you turn on iCloud Sync.
What Stillock stores
| Data | Where it's kept |
|---|---|
| Photos, videos, documents, notes and logins, with their names, dates, thumbnails, favorites and folders | Encrypted, on your device. Also in your iCloud Drive, still encrypted, when iCloud Sync is on. |
vault.json: the vault ID, a salt, the creation date and the vault key wrapped with your recovery key | Unencrypted, beside the vault (so in iCloud Drive when syncing). A copy is kept on your device. It contains nothing that opens the vault without your recovery key. |
| Your passcode key, Face ID key, lock options and wrong-attempt count | This device's keychain only. Never synced or backed up. |
| An encrypted copy of your logins for AutoFill | On your device, in a container shared only with Stillock's AutoFill extension. Only while Fill Passwords in Safari & Apps is on, which is off by default. Turning it off deletes the copy. |
| App settings, such as sections shown, Auto-Lock, sort order, AutoFill and privacy toggles, when you last backed up, and the IDs of items in Recently Deleted | Unencrypted, in Stillock's preferences on your device |
| Site names and usernames (never passwords) | In iOS's on-device AutoFill suggestion list, only while Suggest Above Keyboard is on |
Stillock never stores your passcode or your recovery key.
The vault itself is left out of your iPhone and iPad backups. Stillock's preferences are included in them. See Backups & iCloud Sync.
What leaves your device
| Destination | What's sent | Why |
|---|---|---|
| Your iCloud Drive (Apple) | Encrypted vault files with random names, and vault.json | iCloud Sync, only when you turn it on. iOS does the uploading. |
Nothing else leaves your device by itself. Things you choose to do can move data elsewhere:
- Save to Photos and Save to Files create unencrypted copies where you choose.
- Back Up Vault saves an encrypted file where you choose.
- AutoFill, if you turn it on, gives the login you pick to the app or website you're filling.
- Suggest Above Keyboard, if you turn it on, gives iOS site names and usernames (never passwords) for its suggestions.
- Copy puts a value on this device's clipboard for 60 seconds.
- Terms of Service and Privacy Policy open oddomens.com in your browser.
Dictation, if you use it, is an iOS feature and may be processed by Apple.
Permissions
| Permission | When it's asked | What it's for |
|---|---|---|
| Face ID | When you turn on Face ID unlocking | Unlocking the vault and AutoFill |
| Camera | When you first use Take Photo or Video or Scan Document | Taking photos, videos and document scans straight into the vault |
| Microphone | When you first record a video | Sound for videos you record into the vault |
| Photos (add only) | When you first use Save to Photos | Saving copies to your library |
| Photos (full access) | After an import, only with Remove Originals from Photos on | Deleting the originals you imported. iOS asks you to confirm the deletion. |
Choose from Photos uses the system photo picker, which doesn't need library access. Stillock only receives the photos you pick.
To change a permission, open the iOS Settings app, then Apps › Stillock.
Export your data
- Photos, videos and documents: use Save to Device to save unencrypted copies to Photos or Files. See Save items to your device.
- Everything: Settings › Vault › Back Up Vault saves an encrypted backup that opens in Stillock with your recovery key.
There's no export of notes or logins as plain files.
Delete your data
- One item: delete it, then delete it again from Recently Deleted. Otherwise it's erased after 30 days.
- Everything: Settings › Erase Vault, confirmed with your passcode. With iCloud Sync on, choose Erase on This iPhone Only (or iPad) or Erase Everywhere (deletes the iCloud copy). See Erase Vault.
- The iCloud copy: after you stop syncing, tap Delete Vault from iCloud in Settings › Sync.
- The app: deleting Stillock removes the vault on this device. It doesn't remove an iCloud copy, backup files you saved, or copies you saved to Photos or Files. iOS may keep Stillock's keychain items, such as the wrong-attempt count, after the app is deleted. They can't open anything without the vault.
Policies
Read the full Privacy Policy and Terms of Service.