HushBox

Support

Need help with HushBox? Contact official app support by email. We reply to product questions, bug reports, and privacy inquiries.

Email: hongbiaoluo15@gmail.com

Please include your iOS version, device model, and a short description of the issue. Typical response time: within 2 business days.

• Forgot PIN? We cannot recover it—HushBox never stores your PIN or vault keys on a server. Export a .hushbak backup before changing devices.
• Camera / Photos permission? Open iOS Settings → HushBox and enable the permission for the feature you need.
• Privacy policy: privacy.html

How encryption works

Media is sealed with AES-256-GCM (Apple CryptoKit) before it hits disk. Large videos use a chunked format so files are never held entirely in memory.

• DEK (data key) is random; only unlocked in memory after a correct PIN or Face ID.
• Salt + wrapped DEK live in the iOS Keychain on this device.
• Files sit under Application Support and are excluded from iCloud backup.

Where keys live

Unlocking derives a key-encryption key from your PIN. That unwraps the data key. We do not run servers, accounts, or “forgot password” email flows—there is nowhere else for the key to be.

Why we can’t recover your PIN

HushBox never sees your PIN or plaintext media. If you forget the PIN, the DEK cannot be unwrapped. Uninstalling the app deletes the local vault. Export an encrypted backup (`.hushbak`) before you switch phones.

Trust checklist

• No in-app subscriptions or ads
• No analytics / tracker SDKs in the binary
• App Store paid download unlocks all features
• Optional decoy vault & album locks for on-device privacy

Technical summary for reviewers: see the project’s docs/加密架构摘要.md.