Vault information
NightKeep handles files you import plus filenames, folders, tags, notes, types, fingerprints, sizes, favorite state, view and export activity, trash dates, and other local activity. Primary and decoy vault data are protected separately with AES-GCM. A legacy vault may retain older plaintext metadata or objects until migration and cleanup are complete.
Local-only design and recovery
NightKeep has no NightKeep account, CloudKit sync, developer server, advertising SDK, or analytics service. Vault and preview data are stored on the Mac; preview caches are cleared when the vault locks or the app launches. A recovery drive stores sensitive recovery credential material, not the raw encryption key, and should be protected like a key.
Selected files and exports
You choose files to import and destinations for export. A decrypted export or recovery file is outside NightKeep's encrypted container and remains wherever you save, copy, back up, or share it. The optional Remove Originals action attempts to delete the selected source only after import verification; use it only after confirming the intended encrypted copy.
Retention and deletion
Vault items remain until moved to trash and then permanently deleted or until you erase the relevant vault. Permanent deletion and orphan cleanup are best effort; encrypted blobs can remain if a filesystem operation fails. Erase Both Vaults includes safety checks but cannot delete exports, backups, recovery drives, recipient copies, or other files outside the app container. Secure deletion behavior also depends on macOS and the storage device.
Website analytics
NightKeep's page on brentgaddis.com uses first-party, aggregate website analytics operated through Cloudflare. The site counts page views and allowlisted actions such as opening an App Store, support, or privacy link; it also keeps coarse source, country, device, browser, operating-system, engagement, performance, and reliability totals. It does not store raw event rows, visitor or session identities, IP or hashed-IP identifiers, cookie or local-storage visitor IDs, full user agents, full referrers or URLs, form contents, arbitrary text, or a person's raw click history. Country and source cells below five are suppressed, and aggregates are retained for up to 24 months. Cloudflare still processes request and network metadata as necessary to deliver and protect the site. These website measurements are separate from the app.
Questions
Contact Brent Gaddis with privacy questions about NightKeep.