Privacy Policy
What the app does with your photos and videos, which is keep them on your device.
The short version. Nevyrix Gallery has no internet permission. It cannot send your photos, videos, or any other data anywhere, because the operating system will not let it open a network connection at all. There are no accounts, no ads, no analytics, and no third-party SDKs. Everything the app does happens on your device.
Who this covers
Nevyrix Gallery (“the app”) is developed and published by Nevyrix Labs. This policy explains what the app does with information on your device. It applies to the app distributed through Google Play under the package name com.nevyrix.gallery.
The Nevyrix Labs website policy covers this website. This page covers the app.
Data we collect
None. We do not collect, transmit, sell, share, or receive any personal or device data. We operate no servers that the app talks to, and we have no way to identify you or your device.
The app declares no INTERNET permission and no ACCESS_NETWORK_STATE permission in its manifest. Both are explicitly stripped at build time, and the build fails if any bundled library tries to reintroduce them. Without the internet permission, Android blocks every outbound connection at the kernel level regardless of what any code in the app attempts.
Data the app accesses on your device
To be a gallery, the app has to read the media already stored on your phone. That data is read into memory to display it, and is never copied off the device.
| Permission | Why the app asks | Leaves your device? |
|---|---|---|
READ_MEDIA_IMAGES, READ_MEDIA_VIDEO | Core function: to list, thumbnail, and open the photos and videos on your device. On Android 13 and earlier this is READ_EXTERNAL_STORAGE instead. | No |
READ_MEDIA_VISUAL_USER_SELECTED | Supports Android 14’s “Select photos” option, so you can grant access to only the items you choose instead of your whole library. | No |
ACCESS_MEDIA_LOCATION | Reads the GPS coordinates already embedded in your own photo files, so the app can show where a photo was taken. Requested at runtime and refusable; the app works without it. | No |
USE_BIOMETRIC | Unlocks the encrypted Vault with your fingerprint or face. Biometric matching is performed entirely by Android; the app never sees or stores your biometric data. | No |
SET_WALLPAPER | Lets you set a photo as your wallpaper, or a video as a live wallpaper. | No |
The app requests no permission to write to or delete your files directly. Deleting, moving, and renaming media is handed to the Android system, which shows you its own confirmation dialog for each operation.
Data the app stores on your device
- Your settings — grid density, sort order, theme, hidden folders and similar preferences, in the app’s private storage.
- Video resume positions — where you stopped watching a video, in an encrypted local database (SQLCipher, AES-256, with the key held in your device’s hardware-backed keystore).
- Vault contents — any media you move into the Vault is encrypted with AES-GCM-256 and stored inside the app’s private directory. The encryption key is wrapped by a key that lives in your device’s hardware security module and is released only after a successful biometric check. We cannot decrypt it, and neither can anyone without your device and your biometric.
- Crash logs — if the app crashes, the stack trace is written to a local ring buffer so you can send it to us if you want to. File paths, URIs, and filenames are stripped from every line before it is stored. Nothing is ever sent automatically; a log leaves your device only if you tap “Share crash log” and choose an app to send it with.
None of this is included in Android Auto Backup or device-to-device transfer — the app sets allowBackup="false" and ships explicit backup-exclusion rules, so your gallery data and vault never enter Google’s backup system.
Sharing
When you share a photo out of the app, Android’s own share sheet hands the file to the app you pick, and that app’s privacy policy then applies to it. Before sharing an image, Nevyrix Gallery copies it and strips the GPS location tags from the copy, so your location is not handed to the receiving app by accident.
Children
The app is not directed at children and collects no data from anyone, including children under 13.
Your rights
Because we hold no data about you, there is nothing for us to export, correct, or delete on request. All app data lives on your device and is removed completely when you uninstall the app. Android will warn you before uninstalling that the app holds data that cannot be recovered — that warning refers to your Vault contents.
Changes to this policy
If this policy changes, the updated version will be posted at this address with a new “last updated” date. Material changes will also be noted in the app’s release notes on Google Play.
Contact
Questions about this policy or the app: admin@nevyrix.com
Last updated · 23 August 2026