Privacy policy

1. Who we are

Petiko is made by Syaafi Labs (Syaafi Labs Enterprise). Questions about this policy: support@syaafilabs.com.

2. Your photos, videos and files

What you add to Petiko is encrypted on your phone (AES-256-GCM) before it is written, together with its thumbnail, name, dates and album. It is stored in the folder you chose (for example Documents/Petiko), not on our servers: Petiko has no servers for your files and we never see them.

Nothing of the vault goes into Android's own backup or phone-to-phone transfer. Its keys are made on your phone and never leave it in a readable form.

When you share or open an item in another app, Petiko makes a temporary plain copy for that app, deleted when the vault locks. The other app can keep what it receives. Shared photos and videos lose their location by default (Settings › Remove location when sharing).

3. Google Drive backup

Optional. If you turn it on, Petiko copies the vault folder, already encrypted, to a hidden app folder in your own Google Drive, using Google's sign-in screens. Petiko can see only that folder, not your other Drive files. The copy uses your Google storage. You can stop it and delete the copy in Petiko, or delete it in Drive › Settings › Manage apps.

4. Your recovery key and PIN

Petiko never stores your PIN. Your PIN, mixed with a secret kept in your phone's secure hardware, opens the vault on this phone. The recovery key opens it anywhere.

If you allow it at setup, a copy of the recovery key, encrypted with your PIN, is kept with your Google account in Google's Block Store, end-to-end encrypted with your phone's screen lock, so a new phone can restore with your PIN. We never receive it.

5. Break-in photos

Off unless you turn it on. When a wrong PIN is typed, Petiko takes one photo with the front camera, encrypts it straight away and keeps it in your vault. It is never uploaded or sent anywhere, holds no location, and the PINs typed are not kept. Use it only on your own phone: a photo of another person is their personal data.

6. Permissions

Camera (optional): only for break-in photos. Notifications (optional): progress of big imports and the backup reminder. Fingerprint: to open the vault with your fingerprint or face; Petiko never sees them.

The app has no storage permission. You choose photos and files with Android's own file screens, and the vault folder with Android's folder screen. Removing originals from your Gallery always goes through Android's own prompt.

7. Feedback

If you send feedback from Settings, we receive your message, its type, your email if you give it, the app version, Android version, phone model and language. We use it only to answer you and improve Petiko, keep it for up to 12 months, and never sell or share it. Your IP address isn't stored with it.

8. Ads

The free version shows ads from Google AdMob. To show and measure ads, AdMob may collect your device's advertising ID, your IP address (which gives an approximate location), how you interact with ads, and diagnostic information. Where the law requires it (for example in the EU, the UK and some US states), you are asked for consent first. You can change your choice at any time in Settings › Ad privacy choices. A Premium subscription in the app turns ads off.

How Google uses this data: https://policies.google.com/technologies/partner-sites

9. Purchases

Premium is a subscription (US$2 a month or US$20 a year) sold through Google Play. Google handles the payment and the renewal, and you can cancel any time in Google Play. Petiko only learns whether your subscription is active.

10. Children

Petiko isn't directed at children under 13.

11. Changes

When this policy changes, we update this page and the date at the top.