Privacy Policy

Last updated: July 24, 2026

1. Introduction

Vaultine is a local-first encryption app. This policy explains the very small amount of data the app handles and, more importantly, what it never touches: the contents of your vaults.

2. What the app collects

  • Your files, photos, and documents — never collected. Everything you add to a vault is encrypted and stored on your device. It is never transmitted to us, and we operate no servers that hold it. If you enable Dropbox sync, encrypted chunks go to your own Dropbox account and nowhere else.
  • One-time install check-in. The first time you launch Vaultine, the app registers your device once. This sends: a randomly generated install ID; your device make, model, and screen size; your operating-system and app version; your language and country; and a push notification token. It contains no account, no email, and nothing that identifies you personally.
  • Notifications. The push token lets us send you app notifications. You can turn notifications off at any time in your device settings.
  • No third-party analytics or data harvesting. Vaultine contains no third-party behavioral-analytics SDKs and no data-harvesting trackers, and we never sell your data.

3. What we do not do

  • We do not require or offer an account.
  • We cannot see, decrypt, or recover your vault contents — encryption keys derive from your pattern or PIN and never leave your device.
  • We do not sell or share your personal information.

4. Cloud sync (optional)

Dropbox sync is off by default. When you enable it, files are encrypted into chunks before they leave your device; Dropbox receives only indecipherable encrypted data, governed by Dropbox's own terms and privacy policy.

5. Security

On-device AES-256-GCM encryption; keys are derived locally from your 5x5 pattern or 6-digit PIN. If you lose your credentials, only your recovery phrase can restore access — we cannot.

6. Data retention and deletion

Your encrypted vaults live on your device until you delete them in the app or uninstall it. There is no server-side account to delete.

7. Children's privacy

Vaultine is not directed to children under 13, and we do not knowingly collect information from them.

8. Changes to this policy

We may update this policy from time to time. We will post any changes on this page and update the date above.

9. Contact