Privacy Policy

There is nothing for us to hand over.

Last updated 22 September 2026

Vessum collects no personal data of any kind. It has no account system, no server and no analytics, and it makes no outbound network connection because it contains no code that could. This is not a promise we are asking you to trust. It is a consequence of how the app is built, and you can confirm it by putting the phone in aeroplane mode and using the app normally.

1. Who this covers

This policy covers the Vessum iOS app and the website at antoniobarros.fr/vessum. Vessum is made by an independent developer, Antonio Barros, based in France.

2. What the app collects

Nothing. To be specific, Vessum does not collect, transmit, sell or share:

The app requests no tracking permission, because there is nothing to track.

3. Where your content lives

Everything you add stays in Vessum’s private storage area on your device, encrypted with AES-256 before it is written. Specifically:

EncryptionAES-256-GCM, with keys derived from your passcode using PBKDF2-HMAC-SHA256 at 150,000 iterations
Where the key livesNowhere. It is worked out from your passcode each time and held only in memory while a space is open
Cloud storageNone. There is no server and no sync
BackupsThe storage area is excluded from iCloud and from computer backups
File sharingDisabled. Vessum’s storage does not appear in the Files app or on a connected computer

Because none of it leaves the device, there is no copy for us to lose, for anyone to breach, or for any authority to request from us.

4. Your passcodes

Your passcodes are never stored, not on a server and not on your phone. They are only ever typed, used to derive a key, and forgotten.

This has a consequence you should understand before you rely on the app: a forgotten passcode cannot be recovered by anyone, including us. There is no reset, no recovery code and no support procedure that can restore access. If you lose a passcode, the space it opened is unreadable permanently. The app asks you to confirm you have understood this before it creates anything.

5. Photo library access

When you import photographs, iOS shows you its own picker, which runs outside the app. Vessum receives only the images you pick and never gains access to the rest of your library. Imported copies are encrypted inside the app; the originals stay where they are, and removing an item from Vessum does not touch your library.

6. This website

This site sets no cookies and runs no analytics. There is no Google Analytics, no advertising pixel and no third-party tracker of any kind.

The interactive demonstration on the home page runs entirely in your browser using its built-in cryptography. Nothing you type into it, and nothing it generates, is transmitted anywhere.

If you use the contact form on the support page, the name, email address and message you type are emailed to us so we can reply. We keep that correspondence only as long as it takes to deal with your question. Our web host records standard server logs, including IP addresses, as every web server does, and we do not use those logs for anything beyond keeping the site running.

7. Payment

Vessum is a paid app bought through the App Store. Apple handles the transaction and we never see your payment details, your billing address or your Apple Account. We receive only anonymous sales figures by country, which cannot identify anyone.

8. Children

Vessum is not directed at children under 13 and collects no data from anyone, of any age.

9. Your rights

Under the GDPR and similar laws you have the right to access, correct, export or delete the personal data a company holds about you. In our case there is nothing to act on, because we hold no personal data about you at all.

The data inside the app is entirely yours and entirely under your control. Deleting the app removes all of it, permanently and irreversibly.

10. What Vessum does not protect against

A privacy policy that only listed strengths would not be much use, so for completeness:

11. Changes

If this policy changes, the date at the top changes with it and the updated version appears on this page. Since the app collects nothing, we do not expect the substance to change. If we ever added anything that did collect data, it would be announced here first, and it would be optional.

12. Contact

Questions about this policy can go through the contact form. Please do not send us confidential material or passcodes. We will never ask for a passcode, and it would be useless to us.