NullKey 
Start with what the app can do
An account-free vault can create and unlock encrypted storage without an email address or a remote login. That says nothing by itself about analytics, backups or other network activity. Check those separately.
NullKey’s current boundary
The public Android app has no account, no server and no INTERNET permission. Its encrypted vault lives in the app’s local storage. Android’s document picker can still let you choose an external provider for a backup, and that provider may use the network.
You own the recovery plan
There is no “email me a reset link”. Keep a recovery key for forgotten-passphrase access and encrypted backups for device loss. Losing both unlocking secrets makes existing encrypted data inaccessible; losing the data itself cannot be fixed with a key. Compare the distinct jobs of a key and a backup in this recovery guide; then follow the backup and restore routine. See the encrypted backup feature for the file-check details.
Check the website separately
This product website includes Google Analytics, which stays off until you accept it in the consent banner. See Alvento’s website privacy notice for details. This applies to the website only: Google Analytics is not part of the NullKey app and does not see your vault or how you use the app, which has no internet permission. Its hosting infrastructure may process request and operational information. The app privacy policy is published at alvento.uk/nullkey/privacy/; the app’s lack of internet permission does not describe how a browser or website works.
