Privacy Policy & Terms of Service for DotMosaic
View the Project on GitHub qiangshengjia-collab/dotmosaic-legal
App: Vowlock
Developer: Zoro
Contact: qiangshengjia@gmail.com
Effective Date: September 8, 2026
Vowlock lets you lock a message behind a password or a set of questions and answers, and share the resulting cipher text (plus, if you choose, a key text) with someone else so they can unlock it. It also lets multiple people jointly “reveal” a combined message (the Contract feature).
The short version: Vowlock is an offline app. It has no accounts, no servers of ours, and no analytics or advertising SDK. Everything you create — the messages, keys, and contracts — is generated and stored on your device. We never see your plaintext content, your passwords, or your answers.
We do not collect, receive, or have access to any of the following:
Vowlock includes no third-party analytics, advertising, or attribution SDK, and the App itself makes no network requests to any server we operate.
When you lock a message, the App encrypts it on your device using a key derived from your chosen password or answers. The resulting cipher text is designed so that it can only be unlocked by someone who has the matching key text and, for question-based messages, the correct answers. We do not hold a copy of your plaintext, your password, or your answers, and there is no “master key” or account recovery — if a key text or an answer is lost, we cannot recover the content it protects.
The following is created by you while using the App and is saved only in the App’s own local storage on your device. It is never uploaded to us or to any third party:
Messages and Contracts
The cipher text, question labels, titles, and related metadata for messages you’ve created or received, and for contracts you’ve joined, so you can find and revisit them in the App.
Key Library
Reusable keys you’ve created or imported (title, question text, key type). For keys of the question-and-answer type, the actual answers are stored separately in the iOS Keychain, restricted to this device only, excluded from iCloud Keychain sync, and not included in plaintext database backups — this keeps them safer than storing them alongside the rest of the key’s metadata.
Subscription Status
A locally cached flag recording whether your subscription is currently active, so the App can unlock Premium features while offline.
You can erase all of this data at any time by deleting the App from your device.
Vowlock never sends your cipher text, key text, or images anywhere by itself. When you tap a share or copy button, the App hands your text or a rendered image to iOS’s standard share sheet or clipboard — you decide who receives it and through which app (Messages, Mail, AirDrop, or any other app installed on your device). We are not involved in and receive no copy of what you share. Because that content is only as safe as the channel you choose to send it through, share cipher text and key text with care, and consider sending them separately if you want extra caution.
The QR code on a shared image, and the link in the App’s “Share Decode Link” screen, point to a small companion webpage that lets someone unlock a “message”-type share without installing the App. That page runs entirely in the visitor’s own browser using standard Web Crypto APIs — it performs no server-side computation, and it does not upload the cipher text, key text, or answers anyone types into it. It does not collect analytics either. It does not support the Contract (multi-person) feature.
Premium subscriptions are sold and processed entirely by Apple through the App Store using Apple’s StoreKit framework. We never see or store your payment card, Apple ID, or billing details. The App only receives from Apple whether a valid subscription exists for your Apple ID. Apple’s handling of purchase data is governed by Apple’s Privacy Policy.
Vowlock does not request access to your camera, photo library, contacts, location, or notifications. All QR codes shown in the App are generated locally to display information; the App does not use the camera to scan anything.
Vowlock is not directed at children under 13, and we do not knowingly collect information from them. Since the App collects no personal information at all, no such data can be transmitted to us in any case.
All App data lives on your device. There is nothing stored on our side to request, export, or delete. To remove everything, delete the App. Note that if you use iCloud or iTunes device backups, your device backup may include the App’s SwiftData store (though question-and-answer keys stored in the Keychain are excluded from iCloud Keychain sync as noted in Section 4); that backup is controlled by Apple and your device settings, not by us.
Because we do not collect or process personal data about you, there is no personal data for us to access, correct, port, or delete on your behalf. You remain in full control of the data on your device. If you have questions about this, contact us at the email below.
We may update this Privacy Policy as the App changes. The revised Effective Date at the top of this page will indicate when it was last updated, and material changes will be reflected in the App. Continued use of the App after an update means you accept the revised policy.
Questions about this Privacy Policy:
📧 qiangshengjia@gmail.com