Privacy Policy

Last updated: October 11, 2026

Table of Contents

Overview

PrivateVault PRO is a fully offline encrypted vault app. PrivateVault (Free) is the same vault with ads that support development; the Free edition uses network access only to deliver those ads. In both apps, your personal vault contents are encrypted and managed locally on your device and are never collected, sold, uploaded, or shared.

Data Collection

PrivateVault PRO collects no user data: it has no analytics, advertising, or tracking SDKs, no cloud sync, and no network permission.

PrivateVault (Free) includes the Google AdMob advertising SDK to show ads. To deliver ads, AdMob may collect your device's advertising ID, approximate (coarse) location derived from your IP address, and limited device and ad-interaction information, and shares this with Google. The app requests non-personalized ads. This advertising data is unrelated to, and separate from, your vault.

Neither app collects:

  • Photos, videos, audio, or documents stored in your vault
  • Vault passwords or encryption keys
  • Contacts, messages, or call logs
  • Precise location
  • Behavioral analytics, usage tracking, or crash analytics

Permissions and File Access

PrivateVault PRO & PrivateVault request only permissions needed for user-selected app features. Media and file access permissions are used to import, preview, encrypt, decrypt, export, or manage files that you choose.

  • File and folder import uses Android's Storage Access Framework (the system document/folder picker), so no broad media or storage read permissions are requested.
  • CAMERA and microphone are requested only when you choose in-app capture or document scanning.
  • INTERNET and network-state access are present in PrivateVault (Free) only, and are used solely to deliver ads. PrivateVault PRO requests no network permission.

PrivateVault PRO requires no internet permission, so vault data cannot be transferred off your device. In PrivateVault (Free), network access is used only to load ads; your encrypted vault contents are never transmitted.

How Data Is Used?

Files you select are used locally to provide vault features, including encryption, decryption, local preview, local thumbnails, local search, export, sharing, and organization.

Vault data is never sent to the developer or to any server. In PrivateVault (Free), the only information that leaves your device is the advertising data described above, used by Google to deliver ads, limit how often you see them, and prevent fraud.

Sharing and Disclosure

We never share your vault contents with third parties. Files leave the app only when you explicitly export or share decrypted files using your device's storage picker or the Android share sheet.

PrivateVault (Free) shares advertising data (advertising ID, coarse IP-based location, and ad-interaction data) with Google to deliver ads. See Google's Privacy Policy and how Google uses data from apps that use its services. PrivateVault PRO shares no data.

Advertising (Free edition)

PrivateVault (Free) shows ads through Google AdMob to support development. PrivateVault PRO contains no ads and makes no network connections.

The app requests non-personalized ads. For users in the European Economic Area, the UK, and Switzerland, a Google consent message is presented in line with Google's EU user consent policy before ads are served. You can limit ad personalization at any time in your device's Google settings (Ads), and choosing PrivateVault PRO removes ads entirely.

Security

The app uses strong, industry-standard AES-256 symmetric encryption (with 256-bit keys) applied in secure modes like AES-GCM (Galois/Counter Mode). This provides both confidentiality and integrity protection, allowing the system to detect and reject any unauthorized tampering with encrypted data.

Encryption keys are derived locally using hardened key derivation functions such as PBKDF2 or Argon2, incorporating salting and multiple hashing iterations to resist brute-force and dictionary attacks. All encryption, decryption, and key storage happen entirely on your device.

Other security layers include secure vault sessions, protected previews, screenshot blocking on sensitive screens, and temporary file cleanup. For technical accuracy, while Android provides privacy indicators and dashboards for permissions, they only track when access occurs, not how data is processed afterward. Local, offline encryption remains a critical defense layer once permissions are granted.

Children's Privacy

PrivateVault PRO & PrivateVault are not directed to children under 13 and do not knowingly collect personal information from children.

Data Safety Summary

  • Data sold: No
  • Vault contents shared: No — never transmitted off your device
  • Data collected by developer servers: No
  • Cloud sync: None
  • Ads: PrivateVault (Free) uses Google AdMob and shares advertising identifiers with Google for ad delivery; PrivateVault PRO has no ads and is fully offline

Policy Updates

This policy may be updated to reflect app changes, permission changes, Play Console requirements, or legal requirements.