Privacy Policy

Who this is from

Vault X1 is developed by an independent developer. Contact: support@lkm-apps.in

What the app stores, and where

• Photos, videos, files, notes, and credential entries you add are encrypted on-device with AES-256 before being written to storage. The encryption key is derived from your PIN/biometric unlock and never leaves your device.
• Break-in alert photos (only if you enable this optional feature): a front-camera photo taken automatically after a failed unlock attempt, encrypted and stored on-device the same way, along with a timestamp. These photos are never transmitted anywhere unless you separately use Drive backup or save a backup file: then an extra copy, encrypted with your vault key, goes into that backup (so the photos survive a lost phone). They come back only when you restore the vault onto a new phone; other devices that follow the backup never show them.
• Activity log entries: timestamps and generic action categories (e.g., "photo added," "Drive sync completed") for your own reference. These never include filenames, note titles, or any other content that identifies what you actually stored.
• None of the above is transmitted to us, sold, or shared with any third party. We do not operate any server that receives your vault content.

Optional Google Drive backup

If you choose to enable Drive backup (a Vault X1 Pro feature):

• Your encrypted vault content is uploaded to a hidden, app-private folder in your own Google Drive account (Drive's appDataFolder), invisible in your regular Drive app and inaccessible to any other app, including us.
• Content is already encrypted on your device before upload — Google Drive stores encrypted bytes, not readable content.
• A separate backup passphrase you choose (not your vault PIN) protects the encryption key stored alongside the backup, so only you can restore it.
• Sign-in uses Google's own OAuth flow, scoped only to the drive.appdata permission — the app never requests access to your general Drive files, and Google's sign-in screen shows you exactly what's being granted.
• One device (the main device) uploads; your other devices follow the backup as read-only viewers, and a backup of a different vault never overwrites this one.
• Disconnecting Drive backup (in Settings) stops all future syncing; your existing backup remains in your Drive account until you delete it yourself, from within the app or from Google's own "Manage your Google Account" data controls.

Backup files

You can also save your vault to an encrypted backup file (a Vault X1 Pro feature) and choose where it goes. The file is encrypted the same way as a Drive backup and protected by a passphrase you choose. We never see the file or the passphrase, and a lost passphrase cannot be recovered. The app can also remind you, every few months, to check that you still remember it; that check happens entirely on your device.

Camera use

The camera is used in two places, both opt-in:

1. In-app photo capture, when you choose to take a new photo directly into the vault instead of importing an existing one.
2. Break-in alerts (optional, Vault X1 Pro), described above.

The app never accesses the camera in the background, and never records audio or video — only still photos.

Google Play Billing

Vault X1 Pro is optional: a subscription (monthly, every six months, or yearly) or a one-time Lifetime purchase, both handled entirely through Google Play Billing. We receive only a purchase/subscription status token from Google Play to unlock Pro features — no payment card details, billing address, or other payment information passes through the app or to us.

What we don't do

• No advertising, no ad SDKs, no advertising ID usage.
• No analytics or crash-reporting SDKs, and no usage tracking of any kind.
• No account system of our own — the only sign-in is Google's, and only if you choose to use Drive backup.
• No access to your contacts, location, call logs, or SMS — the app never requests these permissions.
• No selling or sharing of any data with third parties, for any purpose.

Data deletion

• Uninstalling the app deletes all local vault content immediately — the app deliberately opts out of Android's own automatic backup system (allowBackup="false"), so nothing is retained by the OS either.
• If you've enabled Drive backup, disconnecting it in-app leaves the existing backup in your Drive account for you to delete whenever you choose; it is never deleted from your device's action alone, so you always control it directly through your own Google account.

Children's privacy

Vault X1 is not directed at children and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the "Last updated" date above will change accordingly. Material changes will be reflected here before they take effect.

Contact