Privacy Policy

Summary

There is no Vaultic-operated vault server. We run no backend that receives, stores or processes your vault, and there is no account. We do not receive or store your personal data, and Vaultic contains no analytics, telemetry or crash-reporting SDK of its own. Your vault files are encrypted on your device and are never used for advertising.

The free version shows one banner ad from Google Mobile Ads (AdMob). Vaultic Pro and Lifetime remove ads.

Vaultic is not an offline-only app, and we won't describe it as one. It reaches the network in five places: three when you ask, two on their own.

What we collect

We collect nothing ourselves. We have no server, so we receive and store no personal data, usage data, analytics, crash reports or identifiers from the app.

Two third parties receive information directly, neither of which is us:

• RevenueCat — tells Vaultic whether Pro is active and supplies the plans and prices the paywall shows. It receives a random identifier it generates for this install, plus your purchase history from Apple. Never your PIN, your filenames or anything in your vault.
• Google Mobile Ads (free version only) — collects device, network and advertising-related information directly for Google to serve and measure ads. Never your vault contents.

If you have enabled Apple's “Share With App Developers” setting, iOS may deliver aggregated performance and crash diagnostics to Apple's developer tools. That is an Apple mechanism you control in iOS Settings; it never includes vault contents, filenames or keys, and Vaultic plays no part in sending it.

When Vaultic uses the network

Three paths are initiated by you:

• Private Browser. Loads the pages you request directly from those websites, as any browser does. Vaultic uses a non-persistent session, so cookies, cache and history from that session are not retained inside Vaultic once it ends, and a built-in rule list blocks common third-party trackers. This reduces the traces kept inside Vaultic. It does not make you anonymous to the websites you visit, your internet provider, your network operator or anyone else on the path.
• Encrypted iCloud Backup (optional, Pro). Your vault is exported as an AES-256-GCM encrypted archive and uploaded to your own iCloud Drive. Apple's servers hold only opaque ciphertext; the decryption key never leaves your device. Off unless you turn it on.
• Device Transfer (optional, Pro). Sends an encrypted copy directly to another device you pair with, over your local network only. Both devices confirm a one-time code first. It does not route through the internet or any server.

Two run without you asking:

The two automatic paths

• Purchases and Pro status. Handled by Apple's StoreKit and by RevenueCat. On every launch and every return to the foreground, Vaultic asks RevenueCat what you own. Vaultic never sees your payment details — those stay with Apple.
• Advertising (free version only). One banner from Google Mobile Ads, plus the consent form that goes with it. Vaultic Pro and Lifetime never start the ad SDK at all.

A build-phase script fails the build if a general-purpose networking API (URLSession, CFNetwork and similar) or any known analytics, telemetry or crash-reporting SDK appears anywhere in the source, and it confines each path above — advertising included — to the single part of the code that owns it. The same script bans the advertising identifier everywhere in our own code and rejects any ad-targeting field.

Advertising

The free version displays one banner from Google AdMob, on the Vault and Documents screens only, never over the lock screen. Google may collect and process device, network and advertising-related information to deliver and measure ads, under its own policies — see Google's Privacy Policy and how Google uses information from apps that use its services.

Your vault is never used for advertising. Every ad request Vaultic makes is bare: no keywords, no content URL, no custom targeting and no identifier supplied by us. None of the following is sent to Google:

• Vault photos, videos and documents
• Album names
• Your PIN
• Your recovery key or other recovery information
• Private Browser URLs

Where you allow it, ads may be personalised. Where you do not, Google serves another eligible ad mode. How you are asked depends on where you are:

Your advertising choices

• European Economic Area, UK and Switzerland. Google's User Messaging Platform — Google's certified consent management platform — presents Google's own consent message before any ad is requested. Reopen it any time from Settings → Privacy Choices in the app.
• United States. Where state privacy laws apply, the same Google message presents your state privacy choices, including choices about the sale or sharing of personal information for advertising.
• App Tracking Transparency (iOS). A personalised ad counts as tracking under Apple's rules, so the free version shows Apple's tracking prompt. Declining costs you nothing: Google simply requests ads without your device's advertising identifier, which Vaultic's own code never reads. Change your answer in iOS Settings → Privacy & Security → Tracking.

Vaultic Pro and Lifetime never request an ad, so they are never asked for advertising consent and never see Apple's tracking prompt.

Where your data lives

All encrypted files, metadata and keys live entirely on your device:

• Encrypted blobs: Library/Application Support/vault-real/blobs/
• Encrypted metadata: Library/Application Support/vault-real/vault.sqlite
• Master key (wrapped): iOS Keychain under kSecAttrAccessibleWhenUnlockedThisDeviceOnly

That Keychain attribute prevents iCloud Keychain sync and backup, and prevents the key from being restored to a different device. Every file is written with NSFileProtectionComplete, so iOS keeps it unreadable while the device is locked.

Vaultic does not sync your vault to iCloud automatically: the local database opts out of iCloud (cloudKitDatabase: .none), and vault files live in Application Support, which is not automatically iCloud-backed. Local backups via iTunes or Finder may include the encrypted blobs, but the master key stays in the Keychain, which is excluded from unencrypted device backups — the blobs are useless without it.

Two secrets, stored two different ways. The master key is device-only and never leaves this device. The backup passphrase — which exists only if you turn on encrypted iCloud backup — is stored separately in your iCloud Keychain, which does synchronise, so the same backup can be restored on your other Apple devices. It is never written inside the archive itself, so anyone holding only the backup file cannot open it.

Cryptography and third-party SDKs

The cryptographic core uses only Apple-provided frameworks (CryptoKit, CommonCrypto): AES-GCM 256-bit encryption, PBKDF2-HMAC-SHA256 key derivation at 200,000 iterations, and SHA-256 integrity verification. No proprietary encryption is implemented.

Vaultic ships three third-party SDKs and no others:

• RevenueCat — purchases and entitlements, in every version.
• Google Mobile Ads SDK (AdMob) — the banner, free version only.
• Google User Messaging Platform — the consent and privacy-choice messages, free version only.

There is no ad mediation and no other ad network. Beyond those three, Vaultic contains no analytics libraries and no attribution frameworks, and we switch off the ad SDK's own crash reporting.

This website

Everything above is about the app. This section is about the site you are reading, which is a separate thing.

The pages load no third-party scripts, fonts, stylesheets, embedded media, tag managers or analytics, and set no cookies. Nothing is written to local storage, and there is no service worker. Every request a page makes goes to this site's own domain; verified by loading each page with an empty cache and recording every request it produced.

What the site cannot avoid sending is the request itself. It is hosted by Netlify (Netlify, Inc., United States), and like any web host its servers receive the IP address, the requested URL, the browser's user agent and the time of each request in order to deliver the page. That processing is Netlify's, under its own privacy policy.

Links that leave the site — the App Store, Apple's licence, Google's policies — take you to those companies, which then see you as a visitor in the ordinary way. The site sends them a strict-origin-when-cross-origin referrer, meaning they learn you came from this domain but not which page. Email links open your own mail app; nothing is transmitted until you send the message.

Your rights

Privacy laws such as the GDPR give you rights to access, correct, export and delete personal data held about you. We hold none: there is no account, no server and no record of you. Deleting the app removes your vault from the device, and Settings → Erase Vault additionally clears the Keychain entries.

For data held by Apple, RevenueCat or Google as a result of purchases or advertising, those companies act under their own policies, and their own tools are the way to exercise those rights.

Vaultic includes a browser with unrestricted access to the web and is rated accordingly on the App Store. It is not directed at children, and we do not knowingly collect personal information from children.

Changes and contact

If this policy changes, the updated version will be posted at this URL with a new date. We will not retroactively reduce your privacy protections.

Questions? See our support page or email support@vaulticapp.com.