Privacy Policy

Torchlight (package: com.hellosofts.torchlight)

Effective date: 30 August 2026

Last updated: 30 August 2026

This Privacy Policy explains how Torchlight ("the App", "we", "us", or "our") handles information in connection with your use of the App. We are committed to protecting your privacy and to being transparent about our data practices. Torchlight is designed to keep your personal content private, and the large majority of your data never leaves your device.

Summary in plain language

Your vault content (photos, videos, audio, notes, and documents) is encrypted and stored only on your device. We do not upload it, and we cannot see it.
Your vault password/PIN and optional recovery email are stored locally in encrypted form and are never transmitted to us.
We show ads through Google AdMob, and we offer optional in-app purchases through Google Play Billing. These services may collect certain data as described below.
We do not sell your personal information.

1. Who we are

Torchlight is a utility application that provides a flashlight and camera tools, plus a private, passcode-protected "vault" for storing personal media, notes, and documents on your device. The App is published by HelloSofts. References to "we" in this policy mean HelloSofts as the developer of Torchlight.

2. Data stored on your device

The following data is created and stored locally on your device only. It is not transmitted to us or to any third party, and we have no access to it:

Vault media and files — photos, videos, audio recordings, notes, and documents that you add to the vault. These are encrypted on your device using AES encryption before being written to local app storage.
Vault password / PIN — used to unlock the vault. It is stored locally in encrypted form and is never sent off the device.
Recovery email (optional) — if you choose to add one, it is stored locally in encrypted form to help you recover access to your vault. It is never transmitted to us or a third party.
Login activity — the App may record failed vault unlock attempts, which can include a photo captured by the device camera at the time of the attempt. This information is stored locally on your device only and is provided for your own security awareness.
App preferences — settings such as your flashlight/UI preferences and gallery organization data, stored locally.

Because this content never leaves your device, it is not "collected" by us under Google Play's Data safety definitions. However, it is still your responsibility to keep your device and vault password/PIN secure.

3. Data collected through third-party services

Torchlight integrates third-party software development kits (SDKs) that may collect or receive certain data when you use the App. This data is handled according to each provider's own privacy policy.

Data type	Collected / Shared	Purpose	Source
Device or other identifiers (e.g., advertising ID)	Collected and shared	Advertising, analytics, fraud prevention	Google AdMob
App activity / interactions (e.g., ad interactions)	Collected and shared	Advertising, analytics	Google AdMob
Approximate (coarse) location, derived from IP	Collected and shared	Advertising, regulatory compliance	Google AdMob
Diagnostics (e.g., crash and performance data)	May be collected	App stability and quality	Google Play services
Purchase information	Processed by Google	Process and validate in-app purchases	Google Play Billing

We do not collect your name, email address (other than the locally stored recovery email described above), phone number, contacts, or the contents of your vault.

4. Device permissions we use

Torchlight requests only the permissions needed for its features:

Camera — to use the in-app camera and zoom features, to capture photos you choose to add to the vault, and to record a photo on failed vault unlock attempts. Camera data is processed on-device.
Flashlight / torch — to turn the device light on and off.
Photos / media / storage — to let you import media into the vault and to save photos you capture. Access is used only for content you explicitly select or create.
Internet / network — to display ads, process in-app purchases, and open links you tap in the in-app browser.
Vibration / sensors — for optional interaction features such as shake detection.

5. How data is used

To provide the App's core features (flashlight, camera, and the encrypted on-device vault).
To display advertisements and support the free version of the App.
To process optional in-app purchases and validate ownership of premium features or ad removal.
To maintain the security, stability, and quality of the App.
To comply with legal obligations and applicable advertising regulations.

We do not sell your personal information. Data described in Section 3 may be shared with the following service providers strictly for the purposes listed:

Google AdMob — for serving and measuring advertisements. See Google Privacy Policy and how Google uses information from apps that use its services.
Google Play Billing — for processing purchases. Payment details are handled by Google and are never received or stored by us.

We may also disclose information if required to do so by law, regulation, legal process, or enforceable governmental request.

7. Advertising and consent

Torchlight uses Google AdMob to display ads. AdMob may use device and usage identifiers to provide personalized or non-personalized advertising. Where required (for example, for users in the European Economic Area, the United Kingdom, and Switzerland), the App presents a consent request using Google's User Messaging Platform so you can choose how your data is used for advertising.

You can reset or limit ad personalization through your device settings (for example, "Ads" settings on Android, where you can reset your advertising ID or opt out of ad personalization).
Purchasing the ad-removal or premium option in the App will stop banner and interstitial ads from being displayed.

8. In-app purchases

The App offers optional in-app purchases and subscriptions (for example, premium features or ad removal) processed through Google Play Billing. We do not collect or store your payment card details. Purchase and subscription management is handled by Google Play. You can manage or cancel subscriptions in the Google Play Store.

9. Data security

Vault content, the vault password/PIN, and the optional recovery email are encrypted on your device using AES encryption with a key derived using PBKDF2.
Data transmitted by third-party SDKs (such as ads and purchases) is sent over encrypted connections (HTTPS/TLS).
No method of electronic storage or transmission is 100% secure. While we take reasonable measures to protect information, we cannot guarantee absolute security. Keeping your device and vault credentials secure is important.

10. Data retention and deletion

On-device content stays on your device until you delete it. You can delete individual vault items, or use the "Clear All Vault Data" option in the App's settings to permanently remove all vault content, the vault password, and login activity from your device.
Uninstalling the App removes App data stored on the device.
Advertising and purchase data handled by Google is retained according to Google's own policies. You can control your advertising identifier through your device settings.

11. Children's privacy

Torchlight is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us so we can take appropriate action.

12. Your rights (GDPR & CCPA)

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict its use, and the right to object to certain processing.

EEA/UK (GDPR): Our legal bases for processing include your consent (for personalized advertising), performance of a contract (for purchases), and our legitimate interests (to operate and secure the App).
California (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising in a way that would require a "Do Not Sell or Share" mechanism beyond the ad consent controls described above. You may request access to or deletion of personal information where applicable.

Because most of your data is stored only on your device, you can exercise deletion directly in the App at any time. For requests relating to data handled by third-party services, please also refer to those providers' policies, or contact us using the details below.

13. International data transfers

Third-party providers such as Google may process data in countries other than your own. Where such transfers occur, those providers implement safeguards consistent with applicable data protection laws.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, features, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the App after an update constitutes acceptance of the revised policy.

15. Contact us

If you have questions or requests regarding this Privacy Policy or your data, please contact us at:

HelloSofts — Torchlight

Email: info@hellosofts.com