None declared
None declared
On the label it is low-risk: CAL collects some data but says none of it is linked to you or used for tracking. None of it falls in Apple's most sensitive categories (health, financial, location, contacts or your own content). In total the label lists 2 data types; 46% of photo vaults we checked declare tracking.
CAL privacy in one look
- 1Collects nothing
- 2Not linked
- 3Linked
- 4Tracks you
Built only from the developer's App Store label. It describes disclosure, not tested behaviour.
CAL collects some data but says none of it is linked to your identity, and none is used for tracking.
Did CAL ask for something?
Pick the permission prompt you saw. We compare it with what CAL's developer declared.
Location is not on CAL's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.
User Content is not on CAL's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.
Contacts is not on CAL's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.
CAL declares no tracking, so a tracking prompt would contradict its label. Decline it, and consider reporting the mismatch to Apple.
Health & Fitness is not on CAL's label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.
A permission is what the app can reach on your iPhone; the label is what the developer says leaves it. They answer different questions.
What CAL collects, explained
| Data type | What it covers | Where to limit it |
|---|---|---|
| Usage DataNot linked to you | What you tap, open and view inside the app, plus which ads you have seen. | There is no single iOS switch. Look for an analytics or personalised-ads toggle in the app's own settings. |
| DiagnosticsNot linked to you | Crash logs, launch times, hang rates and energy use. | Settings › Privacy & Security › Analytics & Improvements › Share With App Developers controls what Apple passes on; the app's own crash reporting is separate. |
What CAL's label means for you
CAL's label has 2 types under “Data Not Linked to You”. A data type can appear in more than one section when it is used for different purposes — for example, identifiers used for both analytics and advertising.
Every type on CAL's label is in the “not linked” section, so the developer says the data is stripped of anything that identifies you before it is used. That is typical of anonymous analytics and crash reporting. Not linked is still collected: the data leaves your phone.
None of the data types fall into the categories most people consider sensitive: health, financial information, precise location, contacts, browsing history or the content you create.
A photo vault holds the pictures you least want seen, so the questions that matter are where the files live, whether they are encrypted, and what happens if you forget the PIN or change phones. Import a harmless test photo, then confirm the original in Photos is deleted or kept as you expect, and try the app's backup and restore before trusting it with anything important.
Among the 167 photo vaults in our snapshot with a label, 46% declare tracking, 54% collect data linked to you and 28% say they collect nothing. CAL lists 2 data types, about the same as the average of 2.5 for this group.
Utilities range from calculators to VPNs, so their labels vary more than any other category. A simple tool that collects identifiers and usage data for tracking is a sign of advertising SDKs.
Settings to check for CAL
- 1
Photos
Settings › Privacy & Security › Photos. Limited Access lets you pick exactly which pictures the app can see; Add Photos Only lets it save without reading your library.
- 2
Lock the app
On iOS 18 and later, touch and hold the icon and choose Require Face ID. Anyone who picks up your unlocked phone then needs your face, fingerprint or passcode to open it.
- 3
Notifications
Settings › Notifications › CAL › Show Previews: When Unlocked keeps message and account details off the Lock Screen.
Does CAL track you?
There is no “Data Used to Track You” section on CAL's label.
Lock CAL behind Face ID
- Find CAL on your Home Screen or in App Library.
- Touch and hold the icon until the quick-actions menu opens.
- Tap Require Face ID (or Require Touch ID / Require Passcode, depending on your iPhone).
- Tap Require Face ID again to confirm. CAL now asks for authentication every time it opens.
The lock is an iPhone feature, so it works whether or not CAL has a passcode of its own. It does not change what the app sends to its developer.
About CAL
| Developer | WIZ STUDIO COMPANY LIMITED |
| App Store category | Utilities (also Productivity) |
| Latest version | 2.2, released October 2026 |
| First released | May 2019 |
| Requires | iOS 16.0 or later |
| Size | 32 MB |
| Age rating | 17+ |
| Languages | 7 (EN, FR, DE, PL, PT, ES, UK) |
| Bundle ID | io.wizstudio.insafe |
The current version shipped in October 2026, so the app is actively maintained and its label is likely current. Labels are updated by developers when practices change.
What the label cannot tell you
- A label is self-reported. Apple publishes the developer's answers and can reject apps that misrepresent them, but it does not independently verify what CAL sends.
- It does not say where data is stored, how long it is kept, whether it is encrypted, or which companies receive it. The privacy policy covers those points.
- Optional data counts: if a feature lets you add something (a profile photo, a phone number), the type is listed even if you never use the feature.
- Data handled only on your iPhone is not 'collected', so a no-collection label is compatible with an app that reads your files locally.
- Third-party sign-in, payment processors and SDKs are supposed to be included, but a label can lag behind a new version.
The question to ask CAL's developer: Can I get my photos back on a new iPhone without the old one?
CAL vs similar photo vaults
- Locket
- Ear Spy Apps
- SecureGallery
- CAL (this app)
- Photo Vault lock Secret album
- App Lock Secret Photo Vault
- Safey
- Photo Vault SealedPocket
Fewer types is not automatically safer: a cloud backup app has to collect your files to work. Compare like with like.
Look up any of our apps in seconds, or put two labels side by side.
Apps similar to CAL
All photo vaults → Who tracks you? A–Z → Apps that collect usage data → Privacy label decoder →
Your CAL privacy checklist
Done. You have applied every control the label points to.
True or false?
- Right.Not quite.
False: there is no Data Used to Track You section on CAL's label.
- Right.Not quite.
Labels are self-reported by developers. Apple can reject or remove apps that misrepresent practices, but it does not audit each label.
- Right.Not quite.
True: Usage Data appears on its label, in the Not Linked to You section.
- Right.Not quite.
It is collected and sent; the developer says it is de-identified rather than tied to your account or device.
- Right.Not quite.
Apple's rules require apps to work the same whether or not you allow tracking.
CAL privacy FAQ
Is CAL safe to use?
Does CAL track you?
What data does CAL collect?
Who makes CAL?
Can I lock CAL with Face ID?
How does CAL compare with other photo vaults?
Can I get my photos back on a new iPhone without the old one?
How do I delete my data from CAL?
For photos and documents you choose to keep apart from your main library, see VaultForYou.