VaultioPrivacy Policy
- Vaultio collects no data. The app contains no analytics, advertising, tracking or third-party code, and no networking code.
- Your vault is encrypted and stays on your iPhone. It isn't sent to us, to Apple or to anyone else.
- There are no accounts. You never sign up or give us your name or email address to use the app.
- Purchases are handled by Apple. We receive no personal data when you buy Vaultio Plus.
- We can't see what's in your vault, and we can't open it or reset your passcode.
Who we are
Vaultio is made by Johnny Liao, an independent developer ("we", "us"). If you have a question about this policy or your privacy, email wumbusapps@gmail.com.
What the app collects
Nothing. Vaultio doesn't collect, store on a server, sell or share any information about you or about how you use the app. In particular, the app has:
- no account or sign-up;
- no analytics, crash-reporting or advertising software, and no third-party code of any kind;
- no tracking across apps or websites, and no use of the advertising identifier;
- no networking code: Vaultio itself never connects to the internet, to us or to anyone else.
Because nothing leaves your device, the App Store privacy label for Vaultio is "Data Not Collected".
Your vault
- Encrypted on your iPhone. Photos, videos, files and notes you add, and their names and details, are encrypted on your iPhone with AES-256-GCM using Apple's built-in cryptography (CryptoKit). Each file gets its own random key.
- Keys only you hold. Your vault opens only with your passcode (combined with a key held in your iPhone's Secure Enclave), with Face ID or Touch ID if you turn it on, or with your Recovery Key. We never see or receive any of these.
- Stored only in the app's private storage on this iPhone. The vault is excluded from iCloud Backup and from computer backups, and it doesn't appear in the Files app or in Spotlight search. This is also why, in version 1.0, a lost or replaced iPhone means the vault can't be recovered.
- Your Recovery Key is generated on your iPhone and shown to you once. We don't have a copy.
- Deleting your data. You can delete items at any time, or erase the whole vault in Settings. Deleting the app also permanently deletes the vault.
- Temporary copies. When you preview certain file types or share an item, Vaultio creates a short-lived unencrypted copy in the app's private temporary folder. It's deleted when you're done and whenever the vault locks.
Permissions
Vaultio asks for a permission only when you first use the feature that needs it. You can change your choices at any time in the iOS Settings app. Everything captured or read with these permissions goes straight into your encrypted vault on your iPhone.
| Permission | Used for |
|---|---|
| Face ID | Unlocking your vault, if you turn it on. Face ID is handled entirely by iOS; Vaultio never receives your face data. |
| Camera | Taking photos and videos inside Vaultio. They go directly into the vault, not into your photo library. |
| Microphone | Recording sound for videos you take in Vaultio. |
| Photos (full access) | Only if you choose to delete the originals from your photo library after importing them. Picking photos to import doesn't need this permission. |
| Photos (add only) | Saving an item from your vault back to your photo library when you choose "Save to Photos". |
Purchases
Vaultio Plus subscriptions and the lifetime purchase are sold and processed by Apple through the App Store, under Apple's Privacy Policy. We don't receive your name, email address, Apple Account details or payment information.
The app checks whether you have Vaultio Plus on your iPhone, using purchase information signed by Apple. That information isn't sent to us. Apple gives us sales and financial reports, such as the number of purchases by country or region, which don't identify you. To cancel a subscription or ask for a refund, see Support.
Information Apple may share with us
If you have chosen, in your iPhone's settings, to share analytics with app developers, Apple may share crash reports and aggregated usage statistics (such as the number of installs) with us. These are collected by Apple, not by Vaultio, and never include the contents or names of anything in your vault. You can turn this off at any time in Settings > Privacy & Security > Analytics & Improvements. Reviews you post on the App Store are public and visible to us.
When you contact us
If you email us, we receive your email address and whatever you choose to include in your message. We use it only to reply to you, we don't share it, and we keep it only as long as we need to help you. Ask us at any time and we'll delete it.
Never send us your passcode, your Recovery Key, or anything from your vault. We will never ask for them, and we couldn't use them to help you anyway.
This website
This website is a set of static pages. It uses no cookies, no analytics, no scripts, no web fonts and no third-party resources. It's hosted on GitHub Pages. GitHub logs visitors' IP addresses for security purposes, as described in the GitHub Pages documentation and the GitHub General Privacy Statement. We don't have access to those logs.
What we can and can't access
| We can't access | We can see |
|---|---|
|
|
Because we can't open your vault, we can't recover it for you, and we have nothing from it to hand over to anyone.
Children
Vaultio doesn't collect personal information from anyone, including children.
Your rights
Depending on where you live, laws such as the GDPR (EU and UK) and the CCPA (California) give you rights to access, correct, delete or move personal information about you, and to object to certain uses. Since the app doesn't collect any personal information, the only information we might hold is email you've sent us. To make a request about it, email wumbusapps@gmail.com. If you're in the EU or UK, you can also complain to your local data protection authority. We don't sell or share personal information.
Changes to this policy
If we change this policy, we'll update this page and the effective date above. If a future version of Vaultio adds a feature that changes how data is handled, such as the planned encrypted iCloud backup, we'll update this policy before that version is released.
Contact
Johnny Liao
Email: wumbusapps@gmail.com