Privacy Policy - Vaulta

1) Who we are

Vaulta is developed and maintained by Saifullah Ahad ("we", "us", "our"). Developer portfolio: https://saifullah.ai.

2) What Vaulta does

Vaulta is a private, local personal security vault for Android. It enables users to securely store and organize private documents, passwords, credentials, notes, emergency records, and sensitive files in one encrypted place.

3) Zero Data Collection & Offline Privacy

The developer does not collect, receive, sell, or track your vault contents or usage data. The app has:

• No user account registration or login servers
• No remote cloud storage or background synchronization
• No analytics or behavioral tracking SDKs
• No advertising SDKs or third-party ad networks
• No crash reporting SDKs that send stack traces over the network

Zero Internet Permission: Vaulta does not request or hold the Android INTERNET permission. Vaulta does not make its own internet connections. Android's system file picker can access other apps or cloud storage providers that you choose; those providers operate under their own privacy policies.

4) Permissions Used

Vaulta requests only minimal, feature-critical permissions:

• android.permission.USE_BIOMETRIC and the compatibility permission android.permission.USE_FINGERPRINT: Used for optional local biometric unlock through Android. Android returns an authentication result; Vaulta does not receive your fingerprint or face template.
• Document and image access uses the Android system file picker for files you select, without broad storage, photo-library, or contacts access.

5) On-Device Encryption & Storage

Vault records and imported file copies are written through the app's encryption layer into private internal storage. Security preferences are also kept in private app storage. Viewing a record requires decrypted data in memory; PDF previews use a temporary file in the app's private cache which the preview code deletes when it finishes. No storage method guarantees protection on a compromised or already-unlocked device.

6) Backup and Export

When you choose to export a backup, Vaulta creates an encrypted backup file protected by your password. The file is written to the location you choose through the Android system file picker. If you select a cloud storage provider, that provider may upload the encrypted file. Vaulta does not run its own cloud service. Automatic Android cloud backup and device-to-device transfer of app data are disabled by the app's configuration. Imported originals remain with their original provider unless you delete them there.

7) Data Retention and Deletion

You control the records in the app and any copies you create outside it:

• Deleting an entry removes it from the active vault. Secure erasure from flash storage is not guaranteed.
• Clearing Vaulta's app storage or uninstalling it removes its private app data through Android.
• Exported backups, imported originals, and data copied to the clipboard are outside that deletion. Delete these copies separately, including any copies held by a storage provider.

8) Children's Privacy

Vaulta does not collect any information from anyone, including children under the age of 13.

9) Changes to This Policy

If this policy is updated, the revised version will be reflected in app documentation with an updated effective date.

10) Contact Us

If you have questions or feedback regarding this Privacy Policy, please contact us at:
[email protected]