Vaultumi Privacy Policy

Effective date: [OWNER: fill in at release]
Publisher: [OWNER: legal entity name], [OWNER: postal address]
Contact: [email protected]

Draft prepared from the app's actual behaviour. It must be reviewed by the owner (and counsel if desired) before publication. The URL where it is published must be entered in App Store Connect and in the app.

Summary

Vaultumi does not collect your data. It has no account, no server, no analytics, no advertising and no third-party SDKs. Your photos and videos are encrypted and stored on your device. We cannot see them and cannot recover them for you.

1. What Vaultumi does with your data

Photos and videos. When you choose items to import, Vaultumi reads them from your Photos library, encrypts them on your device and stores the encrypted copies in the app's private storage. Nothing is uploaded to us or to anyone else by Vaultumi. If you choose to remove the originals from your library after importing, iOS asks you to confirm, and the originals go to Recently Deleted in Photos, where iOS keeps them for about 30 days. Copies that Photos has synchronised elsewhere (for example iCloud Photos) may remain until you delete them there.

Camera and microphone. The camera is used for four things, each only when you choose it: the private camera (Premium), which records photos and videos straight into your encrypted vault instead of your Photos library; the document scanner (Premium), which photographs pages to build a PDF in your vault; scanning the QR code on a Legacy Kit card; and, only if you turn it on, the Intruder log (described below). The microphone is used only while recording video. Neither is used for anything else, and nothing the camera sees leaves your iPhone.

Share extension (Vault Drop). Vaultumi adds a "Vaultumi" entry to the iOS share sheet. When you share a photo, video or PDF to it, the file is encrypted straight away into a sealed inbox in storage that only Vaultumi and its share extension can reach, and it is moved into your vault the next time you unlock. The extension does not upload anything and has no network access. While you share, iOS makes a temporary unencrypted copy of the file for the extension; iOS removes it afterwards, and Vaultumi cannot control exactly when. If you share from Photos, the original stays in Photos until you delete it there.

Intruder log (optional, off by default, Premium). If you turn it on, you are shown an explanation and iOS asks for camera access. After the number of wrong PINs you choose in a row (2 to 5) on your main vault's lock screen, Vaultumi takes one photo with the front camera. The photo may show someone other than you. It is encrypted when it is taken, is not added to your Photos library or your gallery, is not included in backups, and can be opened only after you unlock. You can view, export or delete it, and turn the feature off at any time. The iOS camera indicator is on while the photo is taken. Vaultumi does not send the photo anywhere. You are responsible for using this feature lawfully where you live.

Documents and text recognition. Documents (scans, PDFs and images saved as documents) are stored encrypted like your photos. So that you can search them, Vaultumi reads the text in your documents on your iPhone with Apple's Vision framework. The recognized text is stored encrypted in your vault, is kept in memory while the vault is unlocked, and is not part of backup files. It is not sent anywhere.

Similar photos. To find near-duplicate photos, Vaultumi uses Apple's Vision framework on your iPhone to create a small numeric description of each stored preview image. The descriptions are stored encrypted in your vault, are not part of backup files, and are not sent anywhere. Nothing is deleted unless you choose it, and moved photos wait in Recently Deleted.

Legacy Kit. The Legacy Kit splits a new recovery code into printed cards. The cards are shown to you once and are not stored by Vaultumi. If you save them as a PDF or print them, that copy is yours to protect and delete. Vaultumi cannot see who holds your cards.

Backup safety check. The check opens a backup file you choose, with the secret you type, on your iPhone, and compares it with your vault. It changes nothing, and the secret and any recovery code you type are used for the check and then discarded.

Face ID. Face ID is handled entirely by iOS. Vaultumi receives only a yes or no from the system. We never receive or store your face data. Your PIN always continues to work.

PIN, recovery code and backup passphrase. Your PIN and the keys derived from it are never sent anywhere. The recovery code is shown to you once and is not stored on the device. Your backup passphrase is used on your device to encrypt the backup file and is not stored. Because we hold none of these, we cannot reset or recover them.

Backups you create. If you create an encrypted backup file (.vaultumibackup), it is saved where you choose (for example the Files app or iCloud Drive). It is encrypted with your passphrase. Where you store it, and who has access to that location, is your decision.

Exports. When you export a photo or video, Vaultumi writes an unencrypted copy to the place you choose (for example your Photos library or the share sheet). Copies outside the vault are no longer protected by Vaultumi.

Device backups. The encrypted vault files are not excluded from iCloud or computer backups of your iPhone, so that a restored phone still has your vault. The key material that ties your PIN to this device stays in this device's Keychain and is not part of any backup, so after a restore from a device backup you open the vault with your recovery code, not your PIN. Those backups are controlled by Apple and by you. Vaultumi itself does not send anything to iCloud.

2. Data we collect

None. We do not collect, receive, store, share or sell personal data. We do not use cookies or any tracking technology. We do not track you across apps or websites. We do not build profiles.

3. Purchases

Premium can be purchased as a subscription or a one-time purchase. Purchases are processed entirely by Apple through the App Store. We do not receive your name, payment details or Apple ID. The app asks Apple only whether you have an active purchase. Apple's own privacy policy governs that processing. We may see aggregated sales and subscription reports provided by App Store Connect, which do not identify you.

4. Diagnostics

Vaultumi contains no crash reporting or analytics code. If you have chosen to share iOS analytics with app developers, Apple may provide us with anonymous crash and usage statistics through App Store Connect; this is controlled by your iOS settings (Settings > Privacy & Security > Analytics & Improvements).

5. Permissions

6. Network access

Vaultumi, including its share extension, makes no network requests of its own. The only network traffic is performed by Apple's StoreKit and the App Store for purchases and subscription status. Text recognition and photo comparison run on your iPhone.

7. Children

Vaultumi is a general-purpose utility and is not directed at children. Because we collect no data, we hold no information about anyone of any age.

8. Your rights

Because we hold no personal data about you, there is nothing for us to access, correct, export or delete. All your data is on your device and under your control. You can delete it at any time from within the app ("Delete all data") or by deleting the app. Deleting the app removes the vault and the keys; without your recovery code or a backup and its passphrase, deleted data cannot be restored. If you have rights under laws such as the GDPR or CCPA, you may contact us at the address above and we will confirm that we hold no data about you.

9. Security

Your data is protected with AES-256-GCM encryption using keys protected by your PIN, your recovery code and, if enabled, Face ID. No security is absolute. Vaultumi does not protect against a compromised or jailbroken device, malware, someone watching you use the app, or a weak backup passphrase. iOS cannot prevent screenshots; screenshots you take go to your Photos library.

10. Changes

If this policy changes we will update the date above and, for material changes, tell you in the app or in the release notes.

11. Contact

[email protected] / [OWNER: postal address]