Support

Contact: [email protected] - Response time: [OWNER: e.g. within 3 business days]

Please never send us your PIN, recovery code, backup passphrase, or your photos. We do not need them and cannot use them. We cannot unlock, reset or recover your vault: nobody can without your secrets.

For a full explanation of PIN, recovery code and backups see the Backup and recovery guide below.

FAQ

Is my data uploaded anywhere?
No. Vaultumi has no server and makes no network requests of its own. Only Apple's App Store handles purchases.

I forgot my PIN.
Use "Forgot PIN" and enter your recovery code (shown once when you created the vault). Without the recovery code, the vault cannot be opened.

I lost my recovery code but I remember my PIN.
Open the vault, go to Settings > Privacy & Security and generate a new recovery code. Write it down. The old one then stops working.

I made a Legacy Kit and my old recovery code stopped working.
That is how it works. A Legacy Kit creates a new recovery code and splits it into cards, and the old code (and any printed copy of it) stops working only when you tap Finish at the end; if you leave before that, nothing changes. If you want a single recovery code again, create one in Settings > Privacy & Security.

I lost my PIN and my recovery code.
We cannot help. If you have a .vaultumibackup file and its passphrase you can restore it into a new vault.

I got a new iPhone (or restored from a backup) and the PIN does not work.
This is expected. The device-bound part of the PIN protection (the pepper) never leaves the iPhone and is in no backup, encrypted or not, so a phone restored from an iCloud or computer backup cannot be opened with the PIN. Use "Forgot PIN" and the recovery code, then set a new PIN. If you made a .vaultumibackup you can restore that instead. The decoy vault has no recovery code, so it cannot be reopened on the new phone; create it again.

What is the Legacy Kit, and what can it not do?
The Legacy Kit (Settings > Backup & Restore > Legacy Kit, free) splits a new recovery code into printed cards. You choose how many cards to make (2 to 7) and how many are needed to rebuild the code (2 to 5). Give each card to a different person or keep them in different places. When enough cards are brought together, they rebuild the recovery code, which you enter on the Forgot PIN screen to open the vault and choose a new PIN. Limits you should know:

• There is no timer. Vaultumi has no server, so nothing can release your cards after a delay or after your death. The people you choose have to act.
• Anyone who gets enough cards, together with a copy of your vault files (for example from an iPhone backup), can open your vault. Choose carefully, and do not photograph the cards or store them in the cloud.
• If more cards are lost than you can spare (for example 2 of 3 lost when 2 are needed), this recovery path is gone. Your PIN and any backup still work.
• The cards are shown once and are not stored on your iPhone. If you save them as a PDF, that file shows the cards in the clear: delete it when you are done.
• To rebuild a code, open Settings > Backup & Restore > Legacy Kit > "I have cards: combine or test them" in a Vaultumi that is unlocked, and type or scan the cards. Then enter the code on the Forgot PIN screen of the vault it belongs to. Use "Test against this vault" to check that your cards still match your current recovery code.

How do I know my backup works?
Use Settings > Backup & Restore > Backup safety check (free). Choose a backup file, type its secret, and Vaultumi checks that it opens, that nothing in it is damaged, and what it contains compared with your vault today. Optionally type your recovery code to check that too. It changes nothing in your vault. It cannot promise a restore on every device, so keep the secret safe and check again after adding a lot.

How do I share photos, videos or PDFs into Vaultumi from another app?
Use Vault Drop. Open the app at least once. In Photos or Files, tap Share, scroll to the end of the row of apps, tap More, turn on Vaultumi and drag it up. Share a photo, video or PDF to Vaultumi and it is encrypted straight away; it joins your vault the next time you unlock with your main PIN or Face ID. If you share from Photos, the original stays in Photos: delete it there yourself if you want it gone. While you share, iOS makes a temporary unencrypted copy for the extension and removes it afterwards. On the free plan, sharing stops when your 50 items are used; nothing is deleted. The decoy vault never receives shared files.

Vault Drop says "Open Vaultumi once to turn this on".
The extension needs the vault's public key, which Vaultumi creates the first time you unlock after installing this version. Open Vaultumi and unlock it, then share again.

Some shared items say they could not be opened.
They may be damaged, or may have been sealed for a different vault (for example after a reinstall). In Settings > Privacy & Security > Vault Drop & Intruder log you can discard them.

What is the Intruder log?
An optional Premium feature, off by default. When you turn it on, Vaultumi explains what it does and iOS asks for camera access. After the number of wrong PINs you choose (2 to 5) in a row on your main vault's lock screen, the front camera takes one photo. It may show someone other than you, so use it responsibly and lawfully where you live. The photo is encrypted when it is taken, is not in your gallery or backups, and can be opened only after you unlock, in Settings > Privacy & Security > Vault Drop & Intruder log > Intruder log. A wrong PIN that opens your decoy vault takes no photo. You can delete photos or turn the feature off at any time.

Can Vaultumi search my scanned documents?
Yes. Scanning documents with the camera is a Premium feature; importing PDFs and saving images as documents is not (the 50-item limit still applies on the free plan). Vaultumi reads the text on your iPhone and stores it encrypted, so you can search it. The text is not part of backup files; after a restore Vaultumi reads your documents again. Older versions of Vaultumi cannot open documents or restore a backup that contains them: update the app first.

What does Similar photos do?
Settings > Storage > Similar photos compares the stored previews on your iPhone and groups near-duplicates. It never deletes anything by itself. Moving the extra photos to Recently Deleted needs Premium, and you can undo it. It may miss some pairs or group photos you consider different; it is a suggestion.

Face ID stopped working.
Face ID is switched off by iOS if you change enrolled faces or remove your passcode. Unlock with your PIN and re-enable Face ID in settings.

After too many wrong PINs the app made me wait. Is my data deleted?
No. Vaultumi never deletes data because of wrong PINs. The wait grows to one hour per attempt after 8 failures. Changing the date or time does not shorten it, and restarting the iPhone starts the current wait again from the beginning.

Can I recover photos if I delete the app?
Only from an iPhone backup or from a .vaultumibackup file. Deleting the app deletes the vault stored in it.

Does restoring a backup erase my current vault?
No. Restore adds missing items and never replaces or deletes. You can run it again if interrupted.

What happens if my Premium subscription ends?
Nothing you have stored is locked or removed. You can still view, export and back up everything and restore any backup. You just cannot add beyond the free limits (50 items, 2 albums) or use Premium-only features.

How do I restore my purchase on a new device?
Open the Premium screen and tap Restore Purchases with the same Apple ID. Purchases are tied to your Apple ID, not to your vault.

How do I cancel my subscription?
In iOS: Settings > your name > Subscriptions, or the App Store account page. Vaultumi cannot cancel it for you, because Apple handles billing. Refund requests go to Apple (reportaproblem.apple.com).

Can you see my photos if I send a bug report?
No. We do not collect logs or data. If you email us, include only what you choose, never your secrets.

Is the decoy vault undetectable?
No. It is a convenience for casual situations. A technical examination of your phone's storage can reveal that a second vault exists. See the Privacy & Security screen in the app.

Can Vaultumi stop screenshots?
No, iOS does not allow apps to block screenshots. The app hides its content in the app switcher and when the screen is being recorded or mirrored. Screenshots you take are saved in your Photos library.

I deleted originals after import but they are still in Photos.
Deleted photos stay in Recently Deleted for about 30 days. Delete them from there too. Copies in iCloud Photos or other devices may need separate deletion.

The import was interrupted.
Open the app again. Incomplete items are cleaned up automatically and you can import the same items again; nothing is duplicated.

The app says a file is damaged.
Run Settings > Storage/Integrity check. If a specific item fails, restore it from a backup. Other items are unaffected.

Is Vaultumi certified or audited?
Not at present. It uses standard Apple encryption primitives. See the security page for what is and is not protected.

Reporting a security issue

Email [OWNER: security contact email] with details. Please do not include real personal data. [OWNER: add a response commitment and, if desired, a PGP key.]

Backup and Recovery Guide

Vaultumi keeps everything on your iPhone. There is no account and no server, so there is no "forgot password" email. You protect your vault with three different secrets, each for a different situation. Please read this once.

1. The three secrets

Face ID is a convenience on top of the PIN. If a Face ID attempt fails, try again or use your PIN. If you add a new face or change your passcode, Face ID is switched off by iOS: use your PIN and turn Face ID on again.

You can also split the recovery code into printed cards that trusted people hold, with the Legacy Kit (section 8). It does not add a fourth secret: it replaces your recovery code with a new one and divides it.

The decoy vault has no recovery code. If you lose its PIN, or move to a new phone, it cannot be reopened. You can only delete it and create a new one.

2. Three different kinds of "backup" (do not mix them up)

1. Local storage (what you have by default). The encrypted vault lives inside the Vaultumi app on this iPhone. If you delete the app or erase the phone without another copy, the vault is gone.
2. iPhone backup (iCloud or computer). The encrypted vault files are part of your normal iPhone backup, on purpose, so a restored phone still has them. The device-bound key that your PIN needs (the "pepper") stays in this iPhone's Keychain and is never included in any backup, encrypted or not. So on a phone restored from an iPhone backup, the PIN does not open the vault. You need your recovery code (or a Vaultumi backup file). Anyone who only holds your iPhone backup, without your recovery code, has encrypted data they cannot test PIN guesses against. The decoy vault has no recovery code, so it cannot be reopened after you restore or move to a new phone.
3. Vaultumi encrypted backup file (.vaultumibackup). You create it inside the app, choose a passphrase and save the file wherever you like (Files, iCloud Drive, a computer, a USB drive). It works on any iPhone with the app and needs only its passphrase. It does not need your PIN, recovery code, Face ID or the old phone. This is the portable, safest-to-rely-on copy.

Recommendation: make a Vaultumi backup file now and after major additions, and keep the file and the passphrase in different places.

3. How to make a backup

Settings > Backup > Create backup. Use the secret the app generates for you (recommended), or choose your own passphrase: at least 12 characters, long and unique (several random words is good). The app rejects very repetitive or trivially common passphrases. A short or guessable passphrase can be cracked by anyone who gets the file. Pick where to save. Wait until the app says it is complete. The file is written under a temporary name and only gets its final name when it is finished, so an unfinished file never looks complete. The backup includes everything in the unlocked vault, including items in Recently Deleted.

Note: the backup contains the vault you are in. A decoy vault has its own, separate backup.

4. How to restore

1. Install Vaultumi and create a vault (new PIN; write down the new recovery code).
2. Settings > Backup > Restore, pick the file, enter its passphrase.
3. The app first checks the whole file. If anything is wrong, nothing is restored.
4. Restoring adds items to your vault. It never deletes or replaces what you already have. Items already present are skipped.
5. If it is interrupted (app closed, phone died), open it again and restore the same file: it carries on and skips what is already done.

Restoring is never limited by the free plan and is always free.

5. What if I lose something?

Warning: if you lose both your recovery secret (PIN/recovery code) and every backup (or its passphrase), your photos and videos may be permanently unrecoverable.

6. Wrong PIN attempts

After 5 wrong PINs the app makes you wait: 30 seconds, then 1 minute, 5 minutes, 15 minutes, then an hour for each further attempt. Changing the date or time on the iPhone does not shorten the wait, and restarting the iPhone starts the current wait again in full. The PIN check you are asked for before changing your PIN, making a new recovery code, creating a decoy vault, creating a backup or deleting all data counts toward the same limit, and a login to the decoy vault does not reset it. The app never erases anything, no matter how many times a wrong PIN is entered.

7. Deleting originals from Photos

After importing, Vaultumi can offer to delete the originals from your Photos library. iOS asks you to confirm. If you edited a photo, the original file is what gets removed, so the edit is not what was imported. Deleted photos go to Recently Deleted in Photos for about 30 days, and copies kept in iCloud Photos or elsewhere may remain. Vaultumi does not erase them securely. If you must remove all traces, delete them from Recently Deleted and from other synced locations yourself.

8. The Legacy Kit: recovery shared between people you trust

The Legacy Kit (Settings > Backup & Restore > Legacy Kit, free) is for the situation where you might not be able to recover your vault yourself, and you want people you trust to be able to do it together.

How it works

1. You choose how many cards to make (2 to 7) and how many are needed (2 to 5). For example, 3 cards, any 2 of which are enough.
2. After you confirm your PIN, Vaultumi creates a new recovery code and splits it into the cards. Your current recovery code, and any printed copy of it, stops working at that moment. The new code is not shown as a single code: it exists only as the cards.
3. The cards are shown once and are not stored on your iPhone. Print them or save them as a PDF, and give each card to a different person or keep them in different places. A PDF shows the cards in the clear: delete it when you are finished. Do not photograph the cards or store them in the cloud.
4. To recover, the holders bring enough cards together. In a Vaultumi that is unlocked, open Settings > Backup & Restore > Legacy Kit > "I have cards: combine or test them", and type or scan the cards. Vaultumi rebuilds the recovery code. Enter it on the Forgot PIN screen of the vault it belongs to, and choose a new PIN. You can also use "Test against this vault" to check that a set of cards matches your current recovery code.

What it does not do

• It has no timer. There is no server, so nothing can release the cards after a delay, or after your death. The people holding the cards have to act, and need to know what the cards are for. Each card says how to use it.
• It is only as safe as the people who hold the cards. Anyone who gets enough cards, together with a copy of your vault files (for example from an iPhone backup), can open your vault. Fewer cards than needed do not reveal your recovery code.
• If too many cards are lost, this way back is gone. With 3 cards where 2 are needed, losing 2 cards ends it. Your PIN, a Vaultumi backup file and its passphrase still work.
• It replaces your recovery code. If you also keep a printed recovery code, replace it with the cards or make a new single code in Settings > Privacy & Security (that undoes the kit: the cards stop working).
• Make the kit from your main vault. The decoy vault has no recovery code, and the Forgot PIN screen only recovers the main vault, so cards made inside the decoy vault cannot reopen it.
• The cards use secret-sharing code written for Vaultumi that has not yet been reviewed by an independent cryptographer. A kit does not replace a backup.

9. The backup safety check

A backup you have never opened is a guess. The Backup safety check (Settings > Backup & Restore > Backup safety check, free) proves, before you need it, that a backup file opens and matches your vault.

1. Choose a .vaultumibackup file and type its secret.
2. Optionally type your recovery code. It is checked and then forgotten.
3. Vaultumi reads the whole file and tells you whether it opens, whether anything in it is damaged, and how it compares with your vault today: how many items it covers, how many were added since (and how big they are), and whether a restore would add anything twice.

It changes nothing in your vault. It does not promise a restore on every iPhone and every future iOS version, and it does not check where you keep the secret. Run it after making a backup, and again after adding a lot.

Good to know about what is in a backup: documents are included like photos. The text Vaultumi reads from documents so you can search them, the comparison data used by Similar photos, files waiting from Vault Drop and Intruder log photos are not in a backup. After a restore, Vaultumi reads your documents again so search works. A backup that contains documents cannot be restored by an older version of Vaultumi: update the app first.

10. Good habits

• Write the recovery code on paper, keep it away from the phone. You will need it if you ever restore your iPhone from a backup.
• Make a Vaultumi backup now, and run the Backup safety check on it. Test restoring it on a spare device if you can.
• Use a strong passphrase for backups.
• Do not store your recovery code and backup passphrase in a note on the same phone.
• Remember that screenshots you take go to your Photos library, outside the vault.