# Privacy Policy

**Effective October 30, 2026**

VaultForYou is a private vault for iPhone. This policy explains what the app does and doesn't collect. The short version: **your photos, videos and documents never leave your iPhone unencrypted, and we can't see them.** The app needs no account and shows no ads.

## Your files

- Photos, videos and documents you import are **encrypted on your iPhone** before they are saved. File names, albums and thumbnails are encrypted too.
- Encryption keys are created on your iPhone and protected by the iOS Keychain. **We never receive your keys, your pattern or passcode, or your files**, and we have no way to open your vault.
- If you forget your pattern and have no recovery key, we can't recover your files. There is no reset we can perform.
- When you import from Photos, the app copies the items you select. It doesn't read the rest of your library. Originals are removed from Photos only if you confirm it.

## Optional iCloud backup (Premium)

If you turn on backup, each file is encrypted on your iPhone before it is stored in **your own iCloud account**, which Apple operates. We don't run a server and can't access your iCloud data. Apple's privacy policy applies to iCloud.

## Sharing and exporting

- **Encrypted archives:** you can share files as an archive that opens only with a passphrase you choose. Keep the passphrase separate from the file.
- **Plain exports:** if you export a file without encryption (for example to save it to Photos or send it in a message), that copy is outside the vault's protection and handled by whichever app you send it to.

## What we collect

We collect a small amount of diagnostic and usage data to fix crashes and improve the app. **None of it includes your files, file names, vault names, patterns or passcodes.** It is not linked to your identity, and we don't use it to track you across other companies' apps or websites.

| Data | Why | Service |
|---|---|---|
| Crash reports and performance data (device model, iOS version, app version, stack trace) | Find and fix crashes | Firebase Crashlytics (Google) |
| Product interaction events (for example: onboarding step reached, plans screen viewed, plan selected, purchase completed or cancelled) | Understand which screens work and which don't | PostHog |
| Purchase history (which plan, when, renewal status) | Show subscription status and measure revenue | RevenueCat |
| Anonymous identifiers generated by these services | Group events from the same install | All of the above |

**You can turn this off** at any time in the app: **Settings › Privacy › Share crash reports and usage.** When it's off, no crash reports or usage events are sent.

We don't sell your data, and we don't use advertising or advertising identifiers.

## Purchases

Payments are processed by Apple. We never see your payment card or Apple ID details. Apple tells us which plan an install bought so the app can unlock Premium. Manage or cancel subscriptions in **Settings › your name › Subscriptions**. Losing Premium never locks you out of files you already stored.

## Permissions

The app asks for access only when you use a feature that needs it:

- **Photos:** picking items to import uses Apple's private picker and needs no permission. The app asks for Photos access only to remove originals after import or to save an export to Photos, when you choose to.
- **Face ID:** only if you turn it on for a vault. Face ID data stays with Apple and never reaches the app.
- **Notifications:** only for an optional reminder before a free trial ends.

## Data retention and deletion

- Your vault data stays on your iPhone (and in your iCloud if backup is on) until you delete it. Deleting a vault in the app removes its files from the iPhone and from the backup. Deleting the app removes local vault data.
- Diagnostic and usage data is kept by the services above for as long as needed to fix issues and analyze trends, typically no longer than 90 days for crash reports and 12 months for usage events.
- To ask us to delete diagnostic data associated with your install, contact us (see below). Because it isn't linked to your identity, tell us roughly when you used the app.

## Children

VaultForYou is not directed at children under 13, and we don't knowingly collect personal information from them.

## Your rights

Depending on where you live (for example in the EU, UK or California), you may have rights to access, correct or delete personal data and to object to processing. Contact us and we will respond within 30 days.

## Changes

If this policy changes, we'll update the date above and, for significant changes, mention it in the app's release notes.

## Contact

Questions about privacy: **support@vaultforyou.app**