CAL

Terms of Use

Last updated 15 October 2026 · CAL for iOS, published by WitWork

These Terms of Use ("Terms") are an agreement between you and WitWork ("we", "us") for the iOS app CAL, listed on the App Store as "CAL: Secret Photo Vault" (the "App"). By downloading, installing or using the App you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the App.

1. The part that matters most

2. Who may use the App

• You must be at least 13 years old, or the minimum age required to consent to these Terms where you live, whichever is higher. If you are under the age of majority, a parent or guardian must agree to these Terms for you.
• You may use the App only on Apple devices that you own or control, as permitted by the Usage Rules in the App Store Terms of Service.
• You must not use the App if you are barred from doing so under the laws of the country you are in, including export-control and sanctions laws.

3. Your licence

We grant you a personal, non-exclusive, non-transferable, revocable licence to use the App for your own non-commercial purposes, under these Terms and Apple's Usage Rules. The App, its design, code and content belong to WitWork and its licensors. Everything you put into your vault remains yours; we claim no rights over it and cannot see it.

4. Your passcode, Recovery Code and security

• You are responsible for choosing your passcode, keeping it secret, and keeping your Recovery Code safe. Anyone who has your passcode or Recovery Code can open your vault.
• Your Recovery Code is stored in your iCloud Keychain so that it is available on your other Apple devices signed in to the same Apple ID. Anyone with access to your Apple ID and an unlocked device may be able to reach it. Protect your Apple ID with a strong password and two-factor authentication.
• After repeated wrong passcodes the App imposes increasing waiting times. It does not erase your data after failed attempts.
• Face ID / Touch ID unlock relies on Apple's biometric system. Anyone your device accepts as you can open the vault with it.
• No security measure is perfect. The App protects your vault content with strong encryption, but it cannot protect you from a compromised device, someone who watches you enter your passcode, or malware on your device. Some information that describes your vault (for example file and folder names, contact details and password-entry titles) is stored on your device without that additional encryption — see the Privacy Policy.

5. Disguise and privacy features

The App includes features meant to keep your vault discreet: a working calculator that unlocks the vault when you enter your passcode, decoy vaults that open with a different passcode, a face-down action, a shake-to-hide panic action, and alternative app icons.

• These features reduce the chance that someone casually notices your vault. They are not a guarantee that it cannot be found, and they are not a legal defence.
• A decoy vault does not make anything you store lawful, and we make no claim about how any disguise will hold up under examination by anyone, including a forensic examination of the device.
• You must not use the App to hide evidence of a crime, to obstruct a lawful investigation or court order, or to mislead authorities who are lawfully entitled to access your data.
• Motion-based features (face-down and shake) rely on your device's sensors and may trigger unexpectedly or fail to trigger.

6. Acceptable use

You may store and use only content you have the right to store and use. You must not use the App to:

• store, access or distribute child sexual abuse material or any other content that is illegal where you are;
• store or share content that infringes someone else's copyright, trademark, privacy or other rights, or that you obtained without permission;
• secretly collect or store images, recordings or personal information of other people in breach of the law;
• harass, stalk, threaten or harm anyone, or plan or facilitate any unlawful activity;
• reverse engineer, decompile, disassemble or modify the App, or attempt to bypass its security, licensing or subscription checks, except to the extent the law expressly allows despite this restriction;
• copy, sell, rent, sublicense or redistribute the App.

Because your vault is encrypted and stored on your device, we do not and cannot monitor its contents. You alone are responsible for what you store and how you use the App.

7. The private browser

• The in-app browser shows third-party websites that we do not control. We are not responsible for their content, availability, security, privacy practices or terms, and your use of them is governed by their own terms. Searches typed in the address bar are sent to Google.
• The browser can save images you long-press, files a website offers as downloads, and screenshots of pages into your vault's "Downloads" folder. You are solely responsible for what you save and how you use it. Save only content you have the right to keep, and respect the copyright and terms of the websites you visit.
• The browser does not download streaming video and does not bypass copy protection (DRM). You may not use it, or try to modify it, to do so.
• For your privacy, links that try to open other apps (such as phone, email or social-media apps) are blocked inside the browser, and sign-ins and cookies last only until you quit the App.
• The ad and tracker blocker (a Pro feature) uses a fixed list of filtering rules. It will not block everything, and it may stop some websites from working correctly. Turn it off if a site misbehaves.

8. iCloud Sync and backups

• iCloud Sync is optional and requires a Pro plan to turn on and to back up. Restoring an existing backup does not require Pro. It depends on Apple's iCloud services, your iCloud storage and your network, which we do not control.
• Your vault is encrypted on your device before it is uploaded to your own iCloud Drive (a folder named "CAL"). Do not move, rename or edit the files in that folder; doing so can make your backup unusable.
• Only one device at a time can change a synced vault (the "main device"). Other devices signed in to the same Apple ID can view it but not change it until you make them the main device. Choosing which copy to keep, restoring a backup, or making another device the main one can replace data on a device. Read the on-screen choices carefully.
• Decoy vaults, browsing history and some device-specific data are never included in iCloud Sync.
• Deleting your backup from iCloud in the App removes it for every device and cannot be undone.
• iCloud Sync is a convenience, not a guarantee. Keep your own copies of anything you cannot afford to lose.

9. Deleting content and the Trash

• Deleted files and folders go to Trash and are permanently deleted automatically after 30 days. Restoring items from Trash requires a Pro plan.
• Deleted contacts, passwords and notes are removed immediately and do not go to Trash.
• "Delete Browser Data" removes your bookmarks, browsing history, download list and website sign-ins. Files you already saved to your vault are not affected.
• Deleting the App removes the vault stored on the device. Copies in iCloud Drive and items in your iCloud Keychain (such as your Recovery Code) remain until you delete them.

10. Free plan, Pro plans and payments

The App is free to download with limits: currently up to 50 files, 3 folders, 10 contacts, 10 passwords and 5 notes. A Pro plan removes these limits and unlocks additional features such as iCloud Sync, Face ID / Touch ID unlock, restoring from Trash and the ad blocker. We may change which features are free or paid; we will not take away a feature you have already paid for during the period you paid for it.

Pro is offered as auto-renewing subscriptions and as a one-time lifetime purchase. All of them are sold and billed by Apple through the App Store:

• Payment is charged to your Apple Account when you confirm the purchase. Prices are shown in the App before you buy and may vary by country.
• Subscriptions renew automatically at the same price and period unless auto-renew is turned off at least 24 hours before the end of the current period. Your account is charged for renewal within 24 hours before the period ends.
• Manage or cancel in Settings → your name → Subscriptions on your iPhone. Cancelling stops future renewals; it does not refund the current period.
• Where a free trial is offered, it converts to a paid subscription when it ends unless you cancel at least 24 hours before. Any unused part of a trial is forfeited when you buy a subscription.
• Use "Restore Purchases" in the App to restore a purchase on a new device or after reinstalling.
• Refunds are handled by Apple under its policies, at reportaproblem.apple.com. We cannot issue refunds ourselves.

11. Availability, updates and changes

We may update, change, suspend or discontinue the App or any feature at any time. Some updates may be required to keep using the App. We do not promise that the App will always be available, uninterrupted or error-free, or that it will work with every device or iOS version. If a change would make your data unreadable, we will give reasonable notice in the App or on this site first.

We may update these Terms. We will change the date at the top and, for material changes, tell you in the App or on this site. Continuing to use the App after a change means you accept the updated Terms.

12. Disclaimer of warranties

To the fullest extent permitted by law, the App is provided "as is" and "as available", without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, security or accuracy. We do not warrant that the App will prevent every form of unauthorised access to your data, or that data stored in it will never be lost or corrupted.

13. Limitation of liability

To the fullest extent permitted by law, WitWork and its team will not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, content, profits, revenue or goodwill, arising from or related to the App or these Terms — including data lost because a passcode or Recovery Code was forgotten, the App was deleted, a device was lost, or iCloud was unavailable. Our total liability for any claim is limited to the amount you paid for the App in the twelve months before the claim.

Nothing in these Terms limits liability that cannot be limited by law, or your rights as a consumer under mandatory laws where you live.

14. Indemnity

To the extent permitted by law, you agree to indemnify and hold WitWork harmless from claims, losses and costs (including reasonable legal fees) arising from content you store or save with the App, your breach of these Terms, or your violation of any law or the rights of anyone else.

15. Apple-specific terms

• These Terms are between you and WitWork only, not Apple. WitWork, not Apple, is solely responsible for the App and its content.
• Apple has no obligation to provide maintenance or support for the App.
• If the App fails to conform to any applicable warranty, you may notify Apple and Apple will refund the purchase price (if any) for the App. To the maximum extent permitted by law, Apple has no other warranty obligation with respect to the App.
• WitWork, not Apple, is responsible for addressing any claims by you or a third party relating to the App, including product-liability claims, claims that the App fails to meet a legal or regulatory requirement, and consumer-protection, privacy or similar claims.
• If a third party claims that the App or your use of it infringes their intellectual property rights, WitWork, not Apple, is responsible for the investigation, defence, settlement and discharge of that claim.
• You confirm that you are not located in a country subject to a U.S. Government embargo or designated as a "terrorist supporting" country, and that you are not on any U.S. Government list of prohibited or restricted parties.
• Apple and its subsidiaries are third-party beneficiaries of these Terms and, once you accept them, have the right to enforce them against you.

16. Termination

You may stop using the App at any time by deleting it. Your licence ends automatically if you breach these Terms. Sections that by their nature should survive termination — including 1, 6, and 12 to 18 — continue to apply.

17. Governing law and disputes

These Terms are governed by the laws of the Socialist Republic of Vietnam, without regard to conflict-of-law rules. Before starting any formal proceeding, please contact us so we can try to resolve the issue informally. This does not deprive you of the protection of mandatory consumer law, or of the right to bring a claim in the courts, where you live.

18. General

• If any part of these Terms is found unenforceable, the rest remains in effect.
• Our failure to enforce a provision is not a waiver of it.
• These Terms, together with the Privacy Policy, are the entire agreement between you and us about the App.
• You may not transfer your rights under these Terms. We may transfer ours to a successor that continues to provide the App.
• If these Terms are translated, the English version prevails in case of conflict.

Contact

WitWork — witwork.digital@gmail.com