Privacy Policy

Last updated 3 October 2026

Vault (Pro) is an offline password manager. It does not collect, send or share any of your data. The app makes no network requests, so nothing you store in it ever reaches us or anyone else.

What the app stores, and where

Everything below is kept on your phone only:

• Your items (logins, cards, notes and Wi-Fi details). Each one is encrypted with AES-256-GCM before it is saved.
• The encryption key, held in your phone's secure storage: the Keychain on iPhone, the Keystore on Android.
• Your master PIN, kept only as a salted hash, never as the PIN itself.
• Your reset question and answer, used to reset a forgotten PIN.
• Your settings, such as the auto-lock time.

What we collect

Nothing. There is no account to create, and the app contains no analytics, no advertising and no tracking. We cannot see your items, your PIN or how you use the app.

Face ID and fingerprint

Biometric unlock is handled by your phone's operating system. The app only learns whether the check passed. It never receives or stores your face or fingerprint data.

Clipboard

When you copy a password or another field, it is placed on your phone's clipboard so you can paste it elsewhere. You can have Vault clear it after 30 seconds. While it is on the clipboard, other apps may be able to read it, as your operating system allows.

Backups

A backup exists only if you export one. The file is encrypted with a PIN you know, and you decide where it goes. Once you save or share it outside the app, it is covered by the privacy terms of wherever you put it, such as your cloud storage or email provider.

Deleting your data

Choose Delete Account in Settings to erase your master PIN, reset question and every item from the device. Deleting the app also deletes your vault. Backups you have already exported are not affected; delete those files yourself if you no longer want them.

This website

The Privacy Policy and Support links in the app open this website in your browser. The site sets no cookies and has no analytics or forms. As with any website, the server that hosts it may keep standard access logs, such as IP address, time and the page requested.

Children

Vault does not collect personal information from anyone, including children.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about this policy? See the Support page.