Encadre privacy policy

Overview

Encadre is an Android app that turns files you choose into encrypted recovery images and rebuilds the originals later from those images and your archive password. Creating and restoring happen in the app on your phone. They need no AC001 Labs account or server.

The one thing Encadre can send out is an optional crash report, described under Crash reports.

Files, folders and recovery images

Encadre only works with files and folders you select through Android’s file, folder and photo pickers. It doesn’t scan your storage and doesn’t ask for broad storage permission. AC001 Labs doesn’t receive your files, file names, folder paths or recovery images.

Recovery images are PNG files that Encadre writes where you tell it to. They contain your encrypted archive data and recovery information. Whatever you do with them afterwards, such as copying them to a cloud service, is your choice, and that service’s own terms and privacy practices apply to those copies.

Archive password and security

An archive is protected by a password you set. AC001 Labs never receives it, doesn’t know it and can’t recover or reset it. If you lose it, and you have no other copy, restoring the archive may be impossible.

Encadre derives the encryption key from your password using Argon2id and encrypts the contents and file details with an authenticated cipher (XChaCha20-Poly1305). No system is perfect, and a weak password weakens the protection.

Saved passwords and device unlock

You can ask Encadre to remember a password on a phone. It is then stored with Android Keystore-backed secure storage on that phone only. You can require Android’s device unlock (fingerprint, face or screen lock) before it is used. This is a convenience for that phone. It doesn’t replace the archive password, and a restore on another phone still needs it. Encadre doesn’t receive biometric data.

Local Library

The Library is a list the app keeps on your phone so you can find your archives. It is not needed for recovery, and Encadre can rebuild it from your recovery images.

Crash reports

Encadre includes Firebase Crashlytics, a crash-reporting service from Google, and is the only third-party service built into the app. Crash reports are off by default. Encadre asks once, on the setup screen or on the home screen, and sends no crash report unless you say yes. You can change your choice at any time in Settings → Privacy. A build without the publisher’s Firebase configuration sends none.

What a report contains. Encadre passes on the type name of the error, a stack trace filtered to Encadre, Flutter and Dart code, and two fixed labels naming the operation and stage. It doesn’t read the error message, and it doesn’t include file names, paths, storage addresses, passwords, keys, hashes, archive identifiers or file contents. Crashlytics also records its standard device and session details: a random installation identifier, app version, Android version, device model and manufacturer, memory and storage figures, and screen orientation.

Before you choose. Crash collection is switched off in the app’s configuration, and a new installation keeps it off until you say yes. Encadre doesn’t claim that no Firebase network activity of any kind can occur before then: Firebase is part of the app and its components may start with it, and we haven’t independently verified what they do about an installation identifier before your choice is applied.

When you say yes. Encadre first deletes any crash report that was waiting on the device from before your choice, and only then turns collection on. A crash from before you agreed isn’t uploaded afterwards.

Turning it off. Encadre stops recording, turns collection off and deletes reports that are still waiting on the device. Reports Google has already received are covered by Google’s terms.

Analytics, advertising and accounts

Encadre doesn’t use Firebase Analytics, Performance Monitoring, Remote Config or push notifications. It contains no advertising and no other tracking service. There is no Encadre account or sign-in.

Network use

Creating, checking, repairing and restoring archives work without a network connection and don’t depend on any AC001 Labs service. The app declares Android’s network permissions because the Crashlytics library requires them.

Retention and deletion

On your phone. Encadre’s local data, including the Library and any saved password, stays until you clear the app’s data or uninstall it. Your recovery images and restored files are yours: they stay where you put them until you delete them.

Crash reports. These are held by Google under Firebase’s terms and retention settings, which AC001 Labs doesn’t control. They aren’t linked to a name or account, so we can’t look up and remove one person’s reports.

There is no Encadre account to delete.

Third-party services

Google Play distributes the app under Google’s own terms. Firebase Crashlytics (Google) receives crash reports as described above while reporting is on.

Children

Encadre is a general-purpose utility and is not specifically designed or directed toward children.

Changes to this policy

If we make a material change, we will update this page and its date. Revisions: on 2 November 2026, the day this policy was first published, crash reporting was changed to require your explicit opt-in.

Contact

Privacy questions: privacy@abhishekkumar001.dev