Your privacy.
In plain English.

01Who we are

This policy covers the Vault iPhone app and this marketing website. Harry Zachariou, the individual developer of Vault, is responsible for personal information received through support enquiries and operation of this site. You can contact us using the details below.

02Your vault stays on your device

Vault does not require an account, name, email address or phone number. The app has no advertising, tracking SDKs or usage analytics, and no Vault content server. We do not receive your vault files, filenames, patterns or recovery words.

Imported files and their metadata are encrypted on your iPhone. Device access secrets are held in the iOS Keychain. Face ID, Touch ID or your device passcode is checked by iOS; Vault does not receive your biometric data. Your pattern and recovery words are not persisted by the app.

Photos, files, camera and microphone access are used for the features you choose, such as importing files or capturing photos and video. You can manage permissions in iOS Settings. Refusing a permission can prevent that feature from working, but does not create a Vault account or send your library to us.

03Exports, backups and deletion

You choose when to export or share files, or save an encrypted backup through Files. An exported original is an unencrypted copy. Your chosen app or storage provider handles that copy under its own privacy policy. Importing a file does not remove its original from Photos or its source provider.

Previews can use temporary decrypted files. Video capture uses a temporary video file protected by iOS before encrypted import. Vault cleans up app-managed temporary files, but this is not a promise of forensic erasure.

You control how long files remain in your vaults and can delete them in the app. Deleting local vault data does not delete external exports or backups. We cannot remotely access, retrieve or delete those copies. Recovery words restore access to existing vault data; they are not a backup of your files.

04Apple purchases and diagnostics

Where in-app purchases are available, Apple processes payments through the App Store. Vault uses StoreKit purchase and entitlement information to unlock or restore purchased features. We do not receive your payment card details. Apple handles account, payment and transaction information under its own privacy policy.

If you enable sharing with app developers in your Apple settings, Apple may make crash reports and aggregated usage information available to us. We use information Apple makes available to investigate faults and improve reliability. Vault does not send us your encrypted library through an analytics service.

05Visiting this website

This website does not add advertising trackers or analytics, and does not use cookies for marketing. Fonts and site assets are served with the site.

Our hosting provider, Vercel, processes technical request information such as IP addresses, requested URLs, browser information and request times to deliver the website, diagnose errors and protect it against abuse. Visiting the site does not give us access to anything stored in your Vault app.

06When you contact us

If you email us, we receive your email address, message and any attachments or other information you choose to include. We use this information to answer you, investigate reported issues and maintain support records. Email is handled through our email provider, Google. Please do not send private vault contents, patterns, recovery words or your device passcode.

Contacting support is optional. We may be unable to investigate a problem without relevant details, such as your app version and a description of the issue. We do not use support emails for marketing.

07How and why information is used

We use support correspondence and technical information for our legitimate interests in responding to enquiries, maintaining a reliable service and preventing abuse. Where necessary to fulfil a purchase or provide requested contractual support, processing is for performance of that contract. We may also retain or disclose information where a legal obligation requires it.

We do not sell personal information or use it for advertising profiles. Information may be handled by providers supporting hosting and email, and disclosed where required by law. We do not make decisions with legal or similarly significant effects about you through automated profiling.

Our hosting and email providers may process information outside your country. The locations and transfer arrangements depend on the provider and service. Contact us for information about the arrangements applicable to information we hold about you.

08How long information is kept

We keep support correspondence only for as long as needed to resolve the enquiry, follow up related issues and meet applicable legal obligations or handle disputes. Retention depends on the nature of the request and whether an issue remains open. Technical logs are subject to the hosting provider’s retention arrangements. You can contact us to ask about or request deletion of information we hold about you.

Vault files remain under your control on your device and in any backups or exports you create. We do not keep a server copy of your library.

09Your privacy rights

Depending on the law that applies, you may request access to, correction or deletion of personal information we hold, restriction of its use, or a portable copy where that right applies. These rights concern information we actually hold, such as support correspondence; we cannot read your local vault to fulfil a request.

You have the right to object to processing based on legitimate interests. Contact us using the email below to exercise this right or another privacy right. We may need proportionate information to verify your identity.

You can also complain to the UK Information Commissioner’s Office or your local data protection authority. You do not need to contact us first.

10Changes to this policy

We will publish updates on this page and change the date above. If our handling of personal information changes significantly, we will bring the change to your attention through the app or website as appropriate.

11Contact

Privacy questions and requests about your personal information can be sent to hczdev1@gmail.com. Please never send your pattern, recovery words or passcode. We will never ask for them.