← Back to Privault

Privacy Policy

Effective: February 20, 2026  ·  Last Updated: February 20, 2026

Privault Technologies Inc. ("Privault," "we," "our," or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our mobile application and services (the "Service").

1. Information We Collect

1.1 Information You Provide

Account Information: Email address and hashed password when you create an account. We never store your password in plaintext.

Encrypted Vault Key: Your vault encryption key, encrypted with a master key derived from your password on your device. We cannot decrypt this key and cannot access your vault.

Subscription Information: Payment is handled entirely by Apple's App Store. We receive purchase confirmation and subscription status only — never your payment details.

1.2 Automatically Collected

Device Information: Device type, OS version, app version, and device identifier — for providing the Service and debugging.

Analytics (opt-in only): Anonymized, aggregated usage analytics via PostHog, only with your explicit consent. Opt out anytime in Settings.

Crash Reports: Via Sentry. These never contain vault contents, encryption keys, filenames, or personal vault data.

1.3 Information We Never Collect

• Your photos, videos, documents, or any vault contents
• Your encryption keys, master password, or PIN
• Your browsing history, bookmarks, or browser data
• Contents of secure notes, passwords, or messages
• Biometric data (processed on-device via Secure Enclave)
• Location data (processed on-device for smart albums only)
• Contacts or address book data

2. Zero-Knowledge Architecture

• All encryption and decryption occurs on your device
• Cloud uploads are encrypted before leaving your device using AES-256-GCM
• We store only encrypted ciphertext — we cannot read your files
• Your master key is derived via PBKDF2 (600,000 iterations) and is never transmitted to our servers
• If you lose your password, we cannot recover your data — by design

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Authenticate your account and manage sessions
• Sync encrypted data across your registered devices
• Process subscriptions and manage your account tier
• Send transactional emails (password reset, security alerts)
• Debug issues via anonymized crash reports
• Comply with legal obligations

We never use your information for advertising, profiling, data selling, or AI model training.

4. Data Sharing

We do not sell, rent, or trade your personal information. Limited sharing occurs with:

• Cloud providers (Cloudflare R2): Store encrypted blobs only — cannot decrypt your data
• Apple App Store: Subscription management only
• Analytics (PostHog, Sentry): Anonymized data, only with your consent
• Legal: If required by law — however, we can only provide encrypted ciphertext and account metadata, never your vault contents

5. Data Retention

Account data: Retained while active; deleted within 30 days of deletion request. Cloud backups: Deleted within 30 days of account deletion. Analytics: 12 months. Crash reports: 90 days.

6. Security Measures

• AES-256-GCM encryption for all vault contents
• TLS 1.3 for all data in transit with certificate pinning
• PBKDF2 key derivation with 600,000 iterations
• Secure Enclave / Keystore for biometric key storage
• Regular third-party penetration testing
• OWASP MASVS Level 2 compliance

7. Your Rights

Depending on your jurisdiction, you may: access your data, request deletion, export your data, update your information, opt out of analytics, or restrict processing. To exercise these rights, contact privacy@privault.app.

8. Children's Privacy

Privault is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us information, contact privacy@privault.app.

9. International Transfers

Encrypted data may be stored on servers in the United States and other jurisdictions. Due to zero-knowledge encryption, stored data is ciphertext unreadable by us or our providers. Standard contractual clauses apply.

10. Changes

We'll notify you of material changes within the app and by updating the "Last Updated" date. Continued use constitutes acceptance.

11. Contact

privacy@privault.app · Privault Technologies Inc., United States

← Back to Privault

Terms of Service

Effective: February 20, 2026  ·  Last Updated: February 20, 2026

These Terms govern your use of the Privault application and services ("Service") provided by Privault Technologies Inc.

1. Eligibility

You must be at least 13 years old to use Privault. Users under 18 require parental or guardian consent.

2. Account

You must provide accurate information and keep credentials confidential. You are responsible for all activity under your account. Report unauthorized use immediately to security@privault.app.

3. Acceptable Use

You agree not to use Privault to: store or transmit illegal, harmful, or abusive content; store child sexual abuse material (CSAM) or content exploiting minors; violate any applicable law; infringe intellectual property rights; reverse-engineer the application; or interfere with the Service. We reserve the right to terminate accounts reported for illegal activity in accordance with applicable law.

4. Subscriptions

Free tier: Available indefinitely with limited features. Paid plans: Billed monthly or annually through Apple's App Store. Free trial: You will be charged at the end of the trial unless you cancel at least 24 hours before. Renewal: Auto-renews unless cancelled via your App Store settings. Refunds: Handled by Apple per their refund policy.

5. Your Content

You retain all ownership rights. Due to zero-knowledge encryption, we cannot access, view, use, or claim any rights to your content. You are solely responsible for what you store and share.

6. Encryption & Data Loss

You are solely responsible for remembering your password or PIN. Due to our zero-knowledge architecture, if you lose access to your password and cannot authenticate via biometrics, your encrypted data will be permanently inaccessible. We cannot recover it for you. We strongly recommend enabling biometric authentication.

7. Intellectual Property

Privault's code, design, logos, and documentation are owned by Privault Technologies Inc. You receive a limited, non-exclusive, non-transferable, revocable license for personal, non-commercial use.

8. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, PRIVAULT SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. TOTAL LIABILITY SHALL NOT EXCEED AMOUNTS PAID IN THE 12 MONTHS PRECEDING THE CLAIM.

10. Indemnification

You agree to indemnify and hold harmless Privault Technologies Inc. from claims arising from your use of the Service or violation of these Terms.

11. Termination

We may suspend or terminate accounts that violate these Terms. You may delete your account anytime via Settings or by emailing support@privault.app.

12. Governing Law

Governed by the laws of the State of California, United States. Disputes shall be resolved in the courts of San Francisco, California.

13. Changes

We may update these Terms. Material changes will be communicated through the app. Continued use constitutes acceptance.

14. Contact

legal@privault.app

← Back to Privault

End-User License Agreement

Effective: February 20, 2026  ·  Last Updated: February 20, 2026

This End-User License Agreement ("EULA") is between you and Privault Technologies Inc. for the Privault application ("Application"). This EULA supplements Apple's Standard Licensed Application End User License Agreement.

1. License Grant

Subject to this EULA, Privault grants you a limited, non-exclusive, non-transferable, revocable license to use the Application on Apple-branded devices you own or control, as permitted by the App Store Terms of Service.

2. Restrictions

You shall not: copy, modify, or distribute the Application; reverse-engineer, disassemble, or decompile it; sublicense, sell, lease, or transfer it; remove or alter proprietary notices; or use it in violation of applicable law.

3. Ownership

The Application is licensed, not sold. Privault Technologies Inc. retains all right, title, and interest. Your content stored within the Application remains your property.

4. Third-Party Services

The Application may use third-party services for cloud storage, authentication, analytics, and payments. Use of these services is subject to their respective terms.

5. Maintenance and Support

Privault Technologies Inc. is solely responsible for maintenance and support. Apple has no support obligation. Contact support@privault.app.

6. Warranty Disclaimer

THE APPLICATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. Privault Technologies Inc., not Apple, is solely responsible for addressing any warranty claims.

7. Product Claims

Privault Technologies Inc., not Apple, is responsible for addressing claims relating to the Application, including product liability claims, regulatory compliance, and consumer protection claims.

8. Intellectual Property Claims

Privault Technologies Inc., not Apple, is responsible for the investigation, defense, settlement, and discharge of any third-party intellectual property infringement claims.

9. Legal Compliance

You represent and warrant that you are not located in a country subject to a U.S. Government embargo and are not on any U.S. Government list of prohibited or restricted parties.

10. Third-Party Beneficiary

You acknowledge that Apple and its subsidiaries are third-party beneficiaries of this EULA and may enforce it upon your acceptance.

11. Termination

This EULA is effective until terminated. Your rights terminate automatically upon failure to comply. Upon termination, cease all use and delete all copies.

12. Contact

legal@privault.app

← Back to Privault

Data Deletion

Effective: February 20, 2026

You may request deletion of your account and all associated data at any time.

Delete From the App

1. Open Privault and unlock your vault
2. Go to Settings → Account → Delete Account
3. Confirm with your PIN or password
4. Tap Permanently Delete

Delete via Email

Email privacy@privault.app from your registered email address with subject "Account Deletion Request." We will verify your identity and process within 30 days.

What Is Deleted

• Account information (email, hashed password, encrypted vault key, settings)
• All encrypted cloud backups and file blobs
• All encrypted metadata, album data, and tags
• Device registrations and push tokens
• Messaging data (key bundles, queued messages, invite sessions)
• All active share links and associated data

Timeline

Immediate: Account access revoked. Within 24 hours: Cloud data queued for permanent deletion. Within 30 days: All data permanently purged from servers, backups, and disaster recovery systems.

What We Cannot Delete

• Local device data: Uninstall the app to remove files stored on your device
• Apple payment records: Managed by Apple per their retention policy
• Legal holds: Minimum data retained if legally required; deleted once the obligation expires

Account deletion is permanent and irreversible. Due to zero-knowledge encryption, once your account and encrypted vault key are deleted, your data cannot be recovered — not by you, and not by us. Please export any data you wish to keep before requesting deletion.

Questions: privacy@privault.app

← Back to Privault

Help & Support

We're here to help

Contact Us

• General Support: support@privault.app
• Security Concerns: security@privault.app
• Privacy Requests: privacy@privault.app
• Response Time: Within 24 hours on business days. Pro and Family subscribers receive priority support.

Frequently Asked Questions

Can you see my photos or files?

No. All files are encrypted on your device before upload. We store only ciphertext and cannot access your vault contents under any circumstances.

What if I forget my password?

We cannot recover your password or encryption keys — this is by design. If biometric authentication is enabled, use Face ID or Touch ID to access your vault and change your password. Without any access method, encrypted data is permanently inaccessible. We strongly recommend enabling Face ID as a backup.

Is Privault really ad-free?

Yes, permanently. Our revenue comes entirely from subscriptions. We will never show ads or sell data.

How do I cancel my subscription?

Open your device's Settings app → tap your name → Subscriptions → select Privault → Cancel. Your subscription remains active until the end of the current billing period.

How do I move my vault to a new device?

Install Privault on your new device, log in, and select "Restore from Cloud Backup." Pro and Family subscribers can sync multiple devices simultaneously.

How do I delete my account?

Settings → Account → Delete Account, or email privacy@privault.app. All data is permanently removed within 30 days. See our Data Deletion page for full details.

What encryption does Privault use?

AES-256-GCM for file encryption, PBKDF2 with 600,000 iterations for key derivation, Signal Protocol (X3DH + Double Ratchet) for messaging, TLS 1.3 with certificate pinning for transport, and Secure Enclave for biometric keys.

How do I report a security vulnerability?

Email security@privault.app. We respond within 48 hours and do not take legal action against good-faith security researchers.

System Requirements

• iOS 16.0 or later
• iPhone 8 or later, iPad (6th generation) or later
• Approximately 100 MB for the app; additional storage for vault contents
• Internet required for cloud backup, sync, and messaging
• Vault and browser work fully offline