1. Summary
Orfeo Cofre is a photo, video and document vault that stays 100% on this phone. No account, no server of ours, no ads. Encryption (AES-256-GCM) happens on the device. If you forget the PIN and have no .cofre backup, the contents cannot be recovered.
You can add up to 25 trial files (real vault and decoy vault separately). Unlimited adding is a one-time purchase through Google Play. Viewing, exporting and backup remain available even if you have not paid.
The app can appear as a calculator in the launcher. That is an optional disguise of Orfeo Cofre, not a third-party calculator.
2. Data we process
We do not collect personal data on a server. Vault contents stay in the app’s private storage, encrypted.
| Data | Where | Why |
|---|---|---|
| Photos, videos, PDFs and other files you add | On the phone only, encrypted | Vault features |
| 6-digit PIN and, if enabled, fingerprint | On the phone only (the PIN is never sent) | Unlock the vault |
| Decoy PIN and decoy selfie (optional) | On the phone only | Decoy vault |
.cofre backup | Wherever you save it | Restore after reinstall |
| Trial file cap | Local prefs; Android Backup of that value only | Deleting or reinstalling does not grant another 25 files |
| Unlimited purchase state | Google Play + local pref | Remove the cap |
| Language and disguise | On the phone only | Preferences |
We do not sell data, run ads, or send analytics or crash reports to third parties.
Android permissions
| Permission | Why |
|---|---|
| Camera | Take photos and videos into the vault |
| Microphone | Audio for videos you record |
| Photos and videos / storage | Import files you choose |
| Biometric unlock | Open the vault if you enable it |
Encrypted chat
If you use the chat, messages are encrypted on your phone before leaving it and travel through the relay cofre.orfeovirtual.com, which cannot read them: it only stores them encrypted until the recipient picks them up, for at most 30 days, and then deletes them. The chat identity is a card generated on your phone; there is no account, phone number or email.
Google Play Billing
The one-time purchase (product orfeo_cofre_unlimited) is processed by Google Play. Orfeo Cofre receives purchase confirmation; we never see card details.
Android backup
If Android backup is on, it includes only the trial-cap counter. It does not include photos, PIN, or the .cofre file.
3. Legal basis (GDPR)
- Performance of the service: storing on the phone what you put in the vault.
- Consent: camera, microphone, gallery and biometrics are granted in Android.
- Google contract: payments are handled by Google Play under its terms.
4. Retention
Vault files stay on the phone until you delete them, empty trash, or uninstall. Without a .cofre backup, uninstalling means losing the contents.
Crashes and usage (Firebase)
The app uses Firebase Crashlytics and Firebase Analytics, by Google, to receive crash reports and anonymous usage statistics (which screens and actions are used and whether the purchase screen was shown). This sends a Firebase-generated installation identifier, the device model and the Android version. Your name, email or the content you handle in the app are never sent. This data is used only to fix errors and improve the app, never for advertising. Google processes it as a data processor under the Firebase privacy policy. Crash reports are kept for 90 days and usage statistics for up to 14 months.
5. Sharing
We do not share vault contents. Google Play is involved only for billing. If you export or share a file, you are the one taking it out of the vault.
6. Your rights
You can delete files in the app, empty trash, uninstall, or restore from a .cofre backup. GDPR requests: soporte@orfeovirtual.com.
7. Children
Orfeo Cofre is not directed at children under 13.
8. Security
AES-256-GCM per file. The PIN wraps the key with PBKDF2. The release build blocks system screenshots. The calculator disguise does not change encryption.
9. Changes
We will publish changes at this URL.
10. Contact
Alfonso Ortega Sequera
NIF: 28729622T
Email: soporte@orfeovirtual.com