Legal

Privacy Policy

Effective November 6, 2026Applies to the Mirage Vault app for iPhone and the website miragevault.app

1. Who we are

Mirage Vault ("Mirage", "we") is published by Cheese Quake LLC, Hreschatyk 27, Kyiv, Ukraine. Questions about this policy: contact at cheese-quake dot com.

2. What the app stores, and where

Photos, videos, notes, scans, files and voice memos you add to the vault are encrypted on your iPhone with AES-256-GCM and stored only in the app's own container on the device, under NSFileProtectionComplete. The vault key is protected by the Secure Enclave of your iPhone. The pattern, PIN and recovery phrase are never stored in readable form and are never transmitted anywhere. We have no copy of your key, your pattern or your phrase and cannot recover them.

The app also stores its settings (for example, lock timing and the chosen icon) on the device. Break-in records, if you turn that feature on, are stored encrypted in the vault on the device: one frame from the front camera, the time and the pattern that was drawn. No location is recorded.

3. What leaves your iPhone

• iCloud backup (optional, on by default). The encrypted vault files are uploaded to the private database of your own iCloud account using Apple's CloudKit. They remain encrypted with your vault key; neither we nor Apple can read them. Turning the backup off in Settings removes the data from iCloud. Apple's handling of iCloud data is described in Apple's privacy policy.
• Purchases. Mirage Pro is sold through the App Store and processed by Apple under your Apple Account. We receive no name, e-mail or payment details; the app only learns whether a purchase is active.
• Nothing else. The app contains no analytics, advertising, crash-reporting or tracking code, and no third-party software of any kind.

4. Permissions the app asks for

• Photos: to import items you choose and, if you ask, to delete the originals from the Photos app, and to save an item back to Photos.
• Camera: to take photos and scan documents straight into the vault and, only if you turn on break-in alerts, to take a frame after wrong unlock attempts.
• Microphone: to record voice memos into the vault.
• Face ID: to unlock the vault. Face ID data is handled by iOS and never reaches the app.

Each permission is requested when the related feature is first used and can be withdrawn at any time in iPhone Settings.

5. The share extension

Items shared into Mirage from another app are encrypted immediately inside the share extension and stored in the app's protected container until the vault is next unlocked. They are not sent anywhere.

6. The website

The website miragevault.app is a static site. It sets no cookies and shows no advertising. It may use a cookieless page-view counter that records only aggregate numbers such as the page visited, the country and the referring site, without any identifier for you; if it does, the counter is named on this page. Links to the App Store carry a campaign label that tells us which page of the site led to an install; Apple reports these as aggregate counts only.

7. Children

The app is not directed at children under 13 and, because it collects no data, holds no information about anyone.

8. Your rights

Since we hold no personal data, there is nothing for us to access, correct, export or delete on your behalf. Everything in the vault is under your control: delete items in the app, erase the vault in Settings, or turn off iCloud backup to remove the encrypted copy from iCloud. Apple Account data and purchase history are managed through Apple.

9. Changes

If this policy changes, the new version is published at this address with a new effective date. A change that would involve collecting any personal data would also be announced in the app before it takes effect.

10. Contact

Cheese Quake LLC, Hreschatyk 27, Kyiv, Ukraine. contact at cheese-quake dot com.