Privacy Policy

Last updated: 24 July 2026

Capsule: Sealed Memories ("Capsule", "the app") is published by Hugo Software Limited ("we", "us"). This policy explains what happens to your information when you use the app.

The short version

Capsule does not collect your personal data. It has no accounts, no sign-in and no cloud storage. Everything you put into a capsule — the title, the note, photos, videos and voice recordings, and the date you chose — is stored only on your device and never leaves it.

What we collect

Nothing. We operate no user database and no analytics. We do not collect names, email addresses, device identifiers, advertising IDs, location, contacts or usage statistics. The app contains no analytics SDK, no advertising SDK and no crash-reporting SDK, and it shows no advertisements.

What stays on your device

Your capsules and all attached media are written to the app's private local storage (IndexedDB inside the app's own sandbox). Other apps cannot read it, and we cannot read it. It is not backed up to any server by us.

If you delete a capsule inside the app, it is removed from your device. If you uninstall the app, all capsules and media are deleted permanently. Because we hold no copy, deleted content cannot be recovered — by you or by us.

When the app uses the internet

The app needs internet access for two things only, and neither one sends your capsules anywhere:

1. Subscriptions. If you buy Capsule Premium, the purchase, the free trial, renewal and cancellation are handled entirely by Google Play Billing. We never see or store your payment details. Google processes that transaction under its own privacy policy: https://policies.google.com/privacy.
2. App configuration. The app may fetch a small configuration file from our server (hq.bnj.app) containing settings such as displayed pricing text and feature flags. This request carries no personal data and no content from your capsules. Standard web-server logs at our hosting provider may briefly record the requesting IP address for security and abuse prevention; these logs are not linked to any user and are not used to build a profile.

If your device is offline, the app still works — capsules, sealing and opening are all local.

Camera and microphone

If you choose to record a photo, video or voice note into a capsule, Android will ask for camera and microphone permission. The recording is written straight into the app's local storage on your device. Nothing is streamed or uploaded. You can decline these permissions and still use the app with text-only capsules, or revoke them later in Android settings.

Children

Capsule is not directed at children and we do not knowingly collect any data from anyone, including children.

Your rights

Because we hold no personal data about you, there is nothing for us to disclose, correct, export or erase on our side. You have full and direct control over your content on your own device. If you have questions about data protection (including rights under the UK GDPR and the EU GDPR), contact us at the address below.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new "last updated" date.

Contact

Hugo Software Limited Email: [email protected]