Vault Privacy Policy

This is the part that matters more than a promise. Vault version 1 contains no networking code at all — no HTTP client, no cloud framework, nothing that can open a connection. An automated check searches the entire app source for networking APIs and fails the build if it finds any, so a release containing them cannot be produced in the first place.

So there is no path by which your information could reach us or anyone else, whether we wanted it or not. A privacy promise is a policy; an app with no way to send data is a property of the build.

The photos and videos you import are encrypted on your device and written only to Vault's own storage. Nothing is copied anywhere else.

• Your originals are yours. The original stays in your photo library until you choose to delete it, and Vault asks before deleting anything.
• Encrypted at rest. Photos and videos are never written to your device unencrypted.
• Export is off by default. Nothing leaves Vault unless you turn that on and then ask for it.

Vault marks its own storage as excluded from device backups, and that is deliberate rather than an oversight. It keeps your encrypted library off Apple's servers, and it means a backup can never be used to open your vault on another device.

The trade-off is stated plainly because it is real: changing phones means your vault does not come with you. Move anything you want to keep out of Vault before you migrate.

Your vault is protected by a key held in your iPhone's Secure Enclave, which does not allow it to be read out of the hardware — not by Vault, and not by us.

Album passwords and the optional Vault passcode are never stored. They are used to derive a key and then discarded. Nothing on your device or ours holds them in any form.

That means a forgotten album password cannot be recovered. The album is gone. This is the design working, not failing: if we could recover it, so could someone who took your phone.

Face ID is handled entirely by iOS. Vault is told whether authentication succeeded and nothing more; your biometric data never reaches the app, and Apple does not share it with anyone.

While media is on screen, Vault is hidden from screenshots, screen recordings, AirPlay and external displays. It also covers its own contents when you switch apps. What it cannot defend against is a second camera pointed at your screen, and nothing on iPhone can.

Privacy law gives you the right to see, correct, export and delete the personal data a company holds about you. We hold none, so there is nothing for us to show you, correct, export or delete — and no request you could make that we would be able to act on.

Deleting the app deletes its data with it. Your photo library is untouched by that, and anything still inside Vault goes with the app.