Effective Date: September 24, 2026

Last Updated: September 24, 2026

App Name: DimCrypt (Package: com.masdim.dimcrypt)

Developer Contact: [email protected]

1. Introduction & Executive Summary

DimCrypt (“we”, “our”, or “the App”) is an encrypted private media vault designed from the ground up on the foundation of Zero-Knowledge Architecture (ZKA) and Local-First Data Sovereignty.

Our fundamental philosophy is simple: Your private data belongs exclusively to you. We do not run external storage servers, we do not require account registration, and we possess zero technical ability to read, decrypt, transmit, monitor, or monetize your encrypted photos, videos, documents, notes, master PIN, or 12-word recovery seed phrase.

This Privacy Policy explains how information is handled when you use DimCrypt on the Android platform.

2. Information We DO NOT Collect (Zero-Knowledge Architecture)

DimCrypt NEVER collects, uploads, transmits, or shares any of the following:

• Your Vault Contents: Your photos, videos, documents, and personal notes remain exclusively on your local device storage.
• Your Master PIN: Your 6-digit PIN is processed strictly on-device using cryptographic key derivation algorithms (PBKDF2/Argon2) and is never transmitted anywhere.
• Your 12-Word Recovery Phrase: The BIP-39 mnemonic seed phrase is generated locally from hardware-based cryptographically secure pseudo-random numbers (CSPRNG). We never have access to this phrase.

3. On-Device Cryptography & Security Implementation

All data protection mechanisms operate locally on your Android device:

1. Authenticated Encryption: User media and notes are encrypted using military-grade AES-256-GCM (Galois/Counter Mode).
2. Key Derivation & Storage: The encryption master key is derived directly from your secret seed phrase and protected by hardware-backed Android Keystore mechanisms.