Vault

Privacy Policy

Last updated: May 31, 2026

Vault is a private, encrypted photo vault. It is built so that your photos stay yours — encrypted on your device, with nothing readable ever leaving it.

The short version

• Your photos and videos are encrypted on your device with AES-256 before they are stored.
• We have no servers that can read your content. Optional cloud sync uploads only ciphertext.
• We do not track you, show ads, or use third-party analytics or advertising.
• We do not sell or share your data.

What the app stores on your device

• Your imported photos and videos, encrypted with a key derived from your passcode (AES-256-GCM). Keys are held in the device Keychain, protected by your passcode and, if enabled, Face ID / Touch ID.
• Your settings (chosen disguise, appearance, etc.) in local app storage.
• Passcodes are never stored in plaintext — only a salted hash is kept to verify them.

Optional cloud sync

Cloud sync is off by default and only runs if you create or sign in to an account.

• When enabled, the app uploads your photos only as encrypted ciphertext. The server cannot decrypt them — it never receives your passcode or encryption keys.
• If you sign up with email, your email is stored solely to operate your account. You may instead use an anonymous account with no email.
• Encrypted data is scoped to your account; no other user can access it.
• Deleting an item removes its ciphertext from the cloud. To delete your whole account and its data, contact us below.

Location

If you use the Weather disguise, the app requests your location to fetch local conditions from the Open-Meteo API. Your coordinates are sent only to retrieve the forecast and are not stored or logged by us. Denying location shows weather for a default city.

Photo library access

The app requests photo access only to let you import photos you select, and (optionally) to delete the originals you chose to import or save exports back. It does not scan or upload photos you don't explicitly select.

What we do NOT do

• No advertising, no ad identifiers, no cross-app tracking.
• No third-party analytics or marketing SDKs.
• No selling, renting, or sharing of personal data.

Children

Vault is not directed to children under 13 and does not knowingly collect data from them.

Changes

If this policy changes, we will update the date above and post the revised policy at this URL.

---

Contact

Questions or data-deletion requests: support@vaultcamera.app

← vaultcamera.app