1. Scope and developer
This Privacy Policy applies to the Torch Archive Android application, also known as Hidden Touch, with package name com.hidden.locker. The app is provided by GoGone Apps. This policy explains what the app accesses, what remains on the device, what third-party SDKs may process and the choices available to users.
2. Information kept on your device
When you choose to use the relevant features, the app may store the following information locally:
- Photos, videos, audio files and documents that you select through Android’s system file picker.
- Private notes created in app versions that expose the notes feature.
- Vault folders and metadata needed to organise or restore selected files.
- Salted cryptographic hashes of the real PIN, fake PIN where configured, and security-question answer. The app does not intentionally store these credentials as readable text.
- App preferences, failed-attempt counters, lockout state, security settings and locally stored consent state.
The developer does not receive or upload this private vault content to a developer-operated server. Sensitive vault files, notes, credential preferences and vault-location metadata are excluded from Android cloud backup and device-transfer backup by the app’s backup rules.
3. Adding, restoring and deleting vault files
The app imports only items that you select. It first copies a selected item into app-owned private storage. After a successful copy, it asks Android to remove the original item when the source provider permits deletion. If Android or the source provider does not permit deletion, the original may remain in its previous location.
When you restore an item, the app copies it to a compatible public folder or a folder you choose and removes the vault copy only after the restore succeeds. Items permanently deleted inside the vault cannot be recovered by the app. Clearing app data or uninstalling the app can permanently remove app-private vault content, so restore important files first.
4. Permissions and device features
- Camera: used only to control the device flashlight. The app does not use this permission to take photographs or record video.
- Files and media: Android’s system file and folder pickers let you choose specific items and restore locations. The current release does not request broad shared-storage or media-library permissions.
- Fingerprint: if enabled, matching is performed by Android. The app receives an authentication result and does not receive, copy or store a fingerprint template or raw biometric data.
- Notifications: used for optional OneSignal push notifications. On Android versions that require runtime notification permission, the app asks only after you select Notifications in Settings. OneSignal consent follows the Android notification-enabled state.
5. Advertising and consent
The app uses Google Mobile Ads to display advertising and Google User Messaging Platform to request and manage privacy choices where required. Google states that the Mobile Ads SDK automatically collects and shares:
- IP address, which may be used to estimate general location.
- User product interactions, including app launches, taps and ad or video views.
- Diagnostic information, including app or SDK launch time, hang rate, energy usage and performance information.
- Device and account identifiers, including the Android advertising ID, app set ID, SDK instance identifiers and other applicable identifiers.
This information is used for advertising, analytics, measurement, security and fraud prevention. Google states that Mobile Ads SDK data is encrypted in transit. Advertising may be personalised or non-personalised depending on region, consent choices, age settings, device settings and Google settings. The app requests updated consent information before requesting ads and presents a Privacy choices entry in Settings when Google reports that one is required.
6. Firebase Analytics and Crashlytics
The app uses Google Analytics for Firebase to measure app launches, sessions, screens and feature engagement, and Firebase Crashlytics to identify crashes, application-not-responding events and stability problems. These services and their supporting Firebase Installations and Sessions components may process:
- App interactions and lifecycle or session events.
- Approximate region derived from a masked IP address.
- App-instance, installation, advertising or Crashlytics identifiers.
- Crash stack traces, relevant application state, device/app metadata and diagnostics.
The app does not deliberately attach private vault content, file names, notes, PIN data, security-question data, email addresses, phone numbers, precise location or a developer-defined user ID to Firebase Analytics events or Crashlytics reports. Firebase collection is enabled automatically in this release.
7. OneSignal notifications
The app uses OneSignal for optional push notifications. When notification access is enabled and OneSignal consent is active, OneSignal may process a push token or subscription identifier, IP address, device and operating-system information, language, time zone, network and session information, and notification delivery or interaction events. Approximate location may be inferred from the IP address.
The app does not intentionally send private vault content, file names, PIN data, security-question data, email addresses, phone numbers, account IDs or precise device location to OneSignal. Disabling app notifications withdraws OneSignal SDK consent for future collection by this app; information already retained is handled under OneSignal’s policy.
8. Third-party policies
- Google Privacy Policy
- How Google uses information from apps that use its services
- Firebase privacy and security
- OneSignal Privacy Policy
9. How information is used
Local information is used to provide the flashlight, vault, folder organisation, file restore, authentication, security and preference features requested by the user. Advertising and consent information is processed for advertising, analytics, measurement, security and fraud prevention. Firebase data is processed for usage measurement and stability diagnostics. OneSignal data is processed for notification delivery and related delivery or interaction measurement.
GoGone Apps does not sell private vault content and does not use the camera to collect photographs or video.
10. Retention and deletion
Local vault content and settings remain on the device until they are deleted through the app, the app’s storage is cleared or the app is uninstalled. Restored files remain in the selected destination. Google, Firebase and OneSignal retain information according to their policies and applicable service settings.
Users can delete individual vault items, restore items before uninstalling, clear the app’s local storage, manage Android permissions and notifications, reset or delete the Android advertising ID where supported, and review available consent choices through the in-app Privacy choices entry. Because the app has no developer-operated account or cloud vault, there is no app account to delete. Requests about data controlled by a third-party service may also need to be sent to that provider.
11. Security
The app uses Android app-private storage, backup exclusions, salted credential hashing, session locking and screenshot blocking on authentication and vault screens. Third-party SDK traffic is expected to use encrypted transport. No storage or transmission method can guarantee absolute security. Root access, malicious software, operating-system vulnerabilities, device compromise or physical access may defeat device protections.
12. Children’s privacy
The app is not directed to children under 13. It should not be configured or marketed as child-directed unless the developer also applies all required Google Play Families and child-directed advertising controls. If you believe a child has sent personal information directly to the developer through a support message, contact us so the request can be reviewed.
13. International processing
Google, Firebase, OneSignal and applicable advertising providers may process information in countries other than the country where a user lives, subject to their policies and applicable safeguards.
14. Changes to this policy
This policy may be updated when the app, SDKs or legal requirements change. The effective date at the top of this page will be revised when a material update is published. The public policy and the policy available inside the app should remain consistent with the current release.
15. Contact
For privacy questions or requests, contact:
GoGone Apps
Email: hiddentouch123@gmail.com
Website: https://gogoneapp.com/
Privacy Policy for Torch Archive / Hidden Touch, package com.hidden.locker.