Your files stay under your control.

01 / What Ai2Life collects

No account, file-upload server, analytics, or advertising.

Hushfile does not require an account or sign-in. Ai2Life does not receive the files you select, their metadata, converted outputs, Vault records, app settings, or usage meter. Hushfile has no Ai2Life file-upload server and contains no advertising, analytics, attribution, or remote crash-reporting SDK.

The app's privacy manifest declares no collected data and no tracking. Hushfile does not sell personal information or use app activity to build advertising profiles.

02 / On-device processing

Hushfile works from a private temporary copy.

When you choose a supported file through Apple's system file picker, Hushfile copies that selection into a uniquely named folder in the app's private temporary storage. The original file stays in the location from which you selected it. Hushfile uses Apple's on-device frameworks to inspect metadata and create the requested output on the iPhone; file contents and metadata are not sent to an Ai2Life server.

Hushfile clears prior import working folders when the app starts, and iOS may also purge temporary storage. Temporary copies are not the Vault: finished outputs that you choose to keep are stored separately as described below.

03 / Vault, settings, and backups

Finished files and their index remain in private app storage.

Converted outputs are saved in Hushfile's Vault inside the app's Application Support directory, not its Documents directory. The Vault is not exposed in the Files app. A local index remembers source and output file names, conversion date, output format, output size, whether metadata stripping was used, and the number of details removed so Hushfile can show the saved conversion again. The Vault uses iOS complete file protection, which makes its files unavailable while the device is locked.

“Keep out of iCloud backup” is on by default and applies iOS's backup-exclusion flag to the Vault. You can change that setting. If you turn backup exclusion off, whether the Vault is included in a device backup is controlled by iOS and the backup service. The setting affects only Hushfile's Vault; it does not change the backup behavior of your original files or copies shared elsewhere.

Hushfile also stores local preferences and the number of free files converted in UserDefaults. Preferences include metadata stripping, output quality and size, auto-clear, backup exclusion, App Lock, and welcome-screen state. These values are not sent to Ai2Life. Optional App Lock asks iOS to authenticate the device owner; Hushfile receives the success or failure result, not Face ID data or the device passcode.

04 / App Store purchases

Apple handles the one-time unlock.

Hushfile includes one free file conversion. A one-time, non-consumable App Store purchase unlocks unlimited conversions. Hushfile uses Apple's StoreKit to load the localized product and price, complete a purchase, verify current entitlement status, receive transaction updates, and restore a prior purchase.

Apple handles the Apple Account, payment, transaction history, and StoreKit service under Apple's terms and privacy policy. Hushfile receives purchase-entitlement status but does not receive card or bank credentials. No selected file, metadata report, or converted output is sent with a StoreKit request, and no purchase data is sent to an Ai2Life server. StoreKit price, entitlement, purchase, and restore services are the only Hushfile functions that may require a network connection.

05 / Sharing and support

A file leaves Hushfile only when you choose a destination.

Hushfile uses Apple's share sheet when you choose Share. You select the person, app, AirDrop recipient, or storage provider. Once a copy is sent or saved elsewhere, that destination's privacy practices and retention rules apply. Hushfile does not share files automatically.

Support and privacy links open only when selected. Hushfile does not automatically attach a source file, output, or metadata report to an email. If you contact support, Ai2Life and its email provider receive the address and content you choose to send and use it to respond and maintain necessary support records. Do not email files, passwords, payment credentials, health records, or other sensitive material.

06 / Deletion and retention

You control Hushfile's local files.

Use Shred on a Vault item to delete its output folder and remove its local index record, or use Shred Everything to remove all Vault outputs and records. You may also choose an automatic clear period; Hushfile applies it when the app launches and when it returns to the foreground. Auto-clear is off by default.

On iPhone storage, Hushfile deletes files through iOS rather than claiming to overwrite physical flash memory. Deleting the app removes its local container, including its Vault, settings, temporary working copies, and free-conversion meter. Copies you already shared or saved elsewhere must be deleted at those destinations separately. Deleting Hushfile does not erase a purchase record maintained by Apple.