How we protect your privacy

01Information We Collect

1.1 Content you store in the App (stays on your device)

The App lets you store photos, videos, notes and passwords in a private vault, protected by a PIN unlock. All of this content, together with your PIN, is:

• encrypted on your device using strong encryption (AES-256-GCM via Google Tink for files, and an encrypted SQLCipher database for notes and passwords), with the encryption key protected by the Android Keystore;
• stored only in the App's private storage area on your device; and
• never transmitted to us, our servers, or any third party.

1.2 Information we do NOT collect

• We do not require you to create an account or log in.
• We do not collect your name, email address, phone number, or contacts.
• We do not collect your precise location.
• We do not sell your personal information to anyone.

1.3 Anonymous analytics and diagnostic data

To understand how the App is used and to fix problems and improve it, we use Google Firebase Analytics, a service provided by Google. Firebase Analytics collects anonymous, aggregated information such as:

• app open and screen-view events and basic in-app interactions;
• approximate session and usage statistics;
• a randomly generated app-instance identifier;
• general device and technical information such as device model, operating system version, app version, language, and coarse country/region (derived from IP address, which Google does not retain in analytics reports).

This analytics data is anonymous and aggregated. It never includes your photos, videos, notes, passwords, PIN, or any content stored in your vault. We use this data only to improve the App and never to identify you personally.

For more on how Google processes this data, see Google's Privacy Policy and How Google uses information from sites or apps that use our services.

1.4 Advertising data (Google AdMob)

The App uses Google AdMob, a service provided by Google, to display banner, native, interstitial, and app-open advertisements. The Google Mobile Ads SDK may automatically collect and share the following information with Google for delivering and measuring ads, analytics, and fraud prevention:

• your IP address, which may be used to estimate your general location;
• ad and app interactions, such as app launches, taps, ad impressions, and video views;
• diagnostic information about the performance of the App and the advertising SDK; and
• device identifiers, including the Android advertising ID, app set ID, and other device or account identifiers where applicable.

Depending on your region, choices, and device or Google settings, Google may show personalized ads based on your interests or non-personalized ads based on contextual information such as your general location and the App. We receive aggregated advertising reports, not information that lets us view your identity or your vault content.

Google's handling of advertising data is governed by Google's Privacy Policy and its explanation of how Google uses data for advertising.

02How We Use Information

We use the limited information described above only to:

• operate and maintain the App;
• understand which features are used so we can improve them;
• diagnose crashes, errors, and performance issues; and
• display and measure advertisements that help support the App; and
• keep the App secure and prevent misuse.

Google may use advertising data to select, deliver, and measure personalized or non-personalized ads as described in Section 1.4. We do not sell or rent your personal information, and we do not use your vault content for advertising, profiling, or automated decision-making.

03Permissions We Request and Why

The App requests only the permissions it needs for the features you use. You can grant or deny these in your device settings at any time; denying a permission may disable the related feature.

04Sharing and Third Parties

We do not share your personal information with third parties, except as follows:

• Google Firebase Analytics processes the anonymous analytics data described in Section 1.3 on our behalf. Google's use of that data is governed by Google's Privacy Policy.
• Google AdMob and Google's advertising partners process the advertising data described in Section 1.4 to deliver and measure ads, provide analytics, and detect fraud and abuse. Their processing is governed by Google's policies and your applicable privacy choices.
• Legal reasons: we may disclose information if required to do so by law, or in response to a valid legal request, or to protect the rights, property, or safety of our users or others. In practice, because your vault content never reaches us, we have no such content to disclose.

05Data Storage, Security and Retention

Your vault content is stored only on your device, encrypted as described in Section 1.1, and remains under your control. We retain no copy of it.

Anonymous analytics data is retained by Google Firebase according to Google's standard retention settings.

Advertising-related information is processed and retained by Google according to Google's policies and your account, device, and consent settings. Information sent to Google is encrypted in transit.

We apply reasonable technical measures to protect information, but no method of electronic storage is completely secure. You are responsible for keeping your PIN and your device secure.

06Deleting Your Data

Because your vault content lives only on your device, you are in full control of it:

• You can delete individual items, notes, or passwords inside the App at any time.
• Uninstalling the App permanently removes all vault content and all locally stored data from your device. This cannot be undone, so export anything you wish to keep first.

If you wish to request deletion of anonymous analytics data associated with your app instance, contact us at the email in Section 9.

You can reset or delete your Android advertising ID from your device's privacy or ads settings. You can also review Google's advertising and privacy controls through your Google Account. Data already processed by Google is subject to Google's retention and deletion policies.

07Children's Privacy

The App is not directed to children under the age of 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

08Your Privacy Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), including the right to access, correct, or delete personal data, to object to or restrict processing, to data portability, and to withdraw consent.

Because we do not receive your vault content or account data, most data under your control remains only on your device. Google processes the analytics and advertising data described in Sections 1.3 and 1.4 under its own privacy policy. To exercise an applicable right regarding data we control, or to ask us a question, contact us at the email in Section 9. You may also use Google's privacy and advertising controls or contact Google regarding data it controls, and you have the right to lodge a complaint with your local data protection authority.

09Contact Us

If you have any questions or concerns about this Privacy Policy, contact us at:

10Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, where appropriate, provide additional notice. Your continued use of the App after a change takes effect means you accept the updated Policy.