Privacy Policy

Who this is from

Vault X1 is developed by an independent developer. Contact: lkm.ma.apps@gmail.com

What the app stores, and where

• Photos, videos, files, notes, and credential entries you add are encrypted on-device with AES-256 before being written to storage. The encryption key is derived from your PIN/biometric unlock and never leaves your device.
• Break-in alert photos (only if you enable this optional feature): a front-camera photo taken automatically after a failed unlock attempt, encrypted and stored on-device the same way, along with a timestamp. These photos are never transmitted anywhere unless you separately enable Drive backup.
• Activity log entries: timestamps and generic action categories (e.g., "photo added," "Drive sync completed") for your own reference. These never include filenames, note titles, or any other content that identifies what you actually stored.
• None of the above is transmitted to us, sold, or shared with any third party. We do not operate any server that receives your vault content.

Optional Google Drive backup

If you choose to enable Drive backup (a Vault X1 Pro feature):

• Your encrypted vault content is uploaded to a hidden, app-private folder in your own Google Drive account (Drive's appDataFolder), invisible in your regular Drive app and inaccessible to any other app, including us.
• Content is already encrypted on your device before upload — Google Drive stores encrypted bytes, not readable content.
• A separate backup passphrase you choose (not your vault PIN) protects the encryption key stored alongside the backup, so only you can restore it.
• Sign-in uses Google's own OAuth flow, scoped only to the drive.appdata permission — the app never requests access to your general Drive files, and Google's sign-in screen shows you exactly what's being granted.
• Disconnecting Drive backup (in Settings) stops all future syncing; your existing backup remains in your Drive account until you delete it yourself, from within the app or from Google's own "Manage your Google Account" data controls.

Camera use

The camera is used in two places, both opt-in:

1. In-app photo capture, when you choose to take a new photo directly into the vault instead of importing an existing one.
2. Break-in alerts (optional, Vault X1 Pro), described above.

The app never accesses the camera in the background, and never records audio or video — only still photos.

Google Play Billing

Vault X1 Pro is an optional annual subscription handled entirely through Google Play Billing. We receive only a purchase/subscription status token from Google Play to unlock Pro features — no payment card details, billing address, or other payment information passes through the app or to us.

What we don't do

• No advertising, no ad SDKs, no advertising ID usage.
• No analytics or crash-reporting SDKs, and no usage tracking of any kind.
• No account system of our own — the only sign-in is Google's, and only if you choose to use Drive backup.
• No access to your contacts, location, call logs, or SMS — the app never requests these permissions.
• No selling or sharing of any data with third parties, for any purpose.

Data deletion

• Uninstalling the app deletes all local vault content immediately — the app deliberately opts out of Android's own automatic backup system (allowBackup="false"), so nothing is retained by the OS either.
• If you've enabled Drive backup, disconnecting it in-app leaves the existing backup in your Drive account for you to delete whenever you choose; it is never deleted from your device's action alone, so you always control it directly through your own Google account.

Children's privacy

Vault X1 is not directed at children and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the "Last updated" date above will change accordingly. Material changes will be reflected here before they take effect.

Contact