Support

🔑 I forgot my PIN. Can I get back in?

If you set up a recovery key before forgetting your PIN, yes. On the lock screen tap "Forgot PIN?", enter your 24-word phrase, and you'll be asked to create a new PIN immediately.

If you did not set up a recovery key, there is no recovery path — this is intentional. The vault is designed so that only the PIN holder can decrypt it. In this case you'll need to delete and reinstall the app to start fresh.

📝 I set up a recovery key. Where is it stored?

Nowhere by us. The 24-word phrase is shown to you exactly once — you must write it down and keep it safe. A copy of the master key wrapped by the phrase is stored in the iOS Keychain on your device only. We never transmit, log, or see the phrase.

🗑️ What happens if I uninstall the app?

All encrypted files and metadata are deleted with the app. The iOS Keychain entries (wrapped master key, biometric secret) survive uninstall by default on iOS — this is iOS behaviour, not specific to Vaultic. To fully clear them, reinstall the app and use the Erase Vault option in Settings, which explicitly deletes the Keychain entries.

☁️ Is my vault backed up to iCloud?

By default, no. Vault files are stored in Application Support which iCloud does not back up automatically, and the app explicitly opts out of CloudKit sync.

With Vaultic Pro, you can enable optional encrypted iCloud Drive backup. The backup is AES-256-GCM encrypted on your device before upload — Apple only ever receives opaque ciphertext. The decryption key never leaves your device.

📵 How can I verify the app makes no network requests?

Three ways:

• Build script: the project has a pre-build shell script ("Zero-telemetry guard") that greps the source for networking symbols and fails the build if any are found.
• Source code: there are no URLSession, NSURLConnection, or CFNetwork calls anywhere in the app outside of the local-network Device Transfer feature.
• Charles / mitmproxy: set your device's HTTP proxy to a local proxy and run the app. You will see zero outbound requests.

🔒 Where do my encrypted files actually live on disk?

Inside the iOS Application Support container:

• Library/Application Support/vault-real/blobs/ — encrypted file blobs
• Library/Application Support/vault-real/vault.sqlite — encrypted metadata

Every file has NSFileProtectionComplete set, meaning the OS hardware encryption key is unavailable while the device is locked.

🎭 What is the Decoy Vault?

A second, completely separate vault protected by a different PIN. When you enter the decoy PIN on the lock screen, the app opens a different vault — empty, or populated with non-sensitive content you choose. The real vault stays hidden. The real vault's wrong-PIN counter still increments when the real PIN is tried, so the decoy unlock doesn't slow down the brute-force protection on the real vault.

💳 How do I manage or cancel my Pro subscription?

Subscriptions are managed entirely through Apple. Go to Settings → [your name] → Subscriptions on your iPhone to view, change, or cancel your Vaultic Pro subscription. We have no access to your subscription or payment details.

🔄 I cancelled Pro. Can I still access my backed-up files?

Yes — always. Restore is free forever, even after cancelling Pro. You can download and decrypt any backup you created while subscribed at any time.

📲 How does Device Transfer work?

Device Transfer moves your entire vault directly to another iPhone over your local Wi-Fi network. No cloud, no cable, no account needed. Both devices must be on the same Wi-Fi network, and both confirm a one-time pairing code before any data moves. The transfer is end-to-end encrypted — the vault data is encrypted before it leaves the source device and remains encrypted in transit.