Vault — a private, offline vault for your photos, documents and credentials.
Vault is a zero-knowledge, offline application. Everything you store is encrypted on your device using AES-256 before it is written to storage. The encryption key is derived on-device from your PIN and is never transmitted to us or any third party. Because of this design, we are technically unable to view, decrypt, recover, or hand over your vault contents.
This policy explains what limited information the app handles, what stays exclusively on your device, and the few third parties involved when you choose to make a purchase.
We do not operate accounts, we do not require an email or phone number to use the app, and we do not sell or share any personal data. There is no advertising and no third-party tracking.
All vault content is stored inside an encrypted database (SQLCipher), with files encrypted before they are written. This includes imported media and documents, credentials, albums, decoy-vault data, OCR text used for search, break-in evidence, and your on-device access log. This data is accessible only after successful unlock and is never sent to us.
Backup is off by default. If you choose to enable encrypted backup or cross-device sync, your data is encrypted on your device before it is uploaded, and remains readable only with your recovery phrase. The backup destination stores only an encrypted archive; neither we nor the storage provider can decrypt it. If you never enable backup, nothing is ever uploaded.
Vault requests certain iOS permissions only to provide specific features. Access is used locally and is not transmitted to us.
Vault Pro is offered as a subscription or one-time purchase processed by Apple through the App Store. Apple handles your payment; we never receive your card details. To manage entitlements across your devices we use RevenueCat, a subscription-management service that processes a pseudonymous app user identifier and non-personal purchase/receipt information. This data is used only to verify and restore purchases and is never linked to your vault contents.
Vault does not include advertising SDKs or third-party behavioral analytics, and does not build a profile of you. We do not track your activity across apps or websites.
Password-health scoring and breach detection run on your device. Your passwords are never uploaded in any form. Breach matching is performed so that a password is never exposed, and results are shown only to you.
Because your data lives on your device, you control its lifetime. You may permanently destroy the entire vault at any time using Emergency Wipe or Shake-to-Wipe, which performs a cryptographic erase — the master key is overwritten and discarded, rendering all encrypted data permanently unreadable. Uninstalling the app also removes its local data.
No system is perfectly secure, and you are responsible for safeguarding your PIN and recovery phrase. We encourage keeping your recovery phrase stored safely offline.
Vault is intended for general audiences and is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. Since the app collects no personal data on our servers, no such information is gathered regardless of age.
The only third parties involved in normal use are Apple (app distribution and payment processing) and, where applicable, our subscription processor for purchase verification. If you enable encrypted backup, the storage provider you select holds only an encrypted, unreadable archive. These parties never receive your decrypted vault contents.
We may update this Privacy Policy to reflect changes to the app or legal requirements. When we do, we will revise the "Effective" date above and, for material changes, provide notice within the app. Continued use after an update constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy or how the app handles data, contact us at: