Privacy Policy

Effective date: June 1, 2025

Vault ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use the Vault app, how we use it, and your rights regarding that information.

By using Vault, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect only the information necessary to provide the Vault service:

• Account information: your username and a securely hashed version of your password. We do not store your password in plain text.
• Financial data you enter: transaction records (amounts, dates, descriptions, categories, notes) and bill schedules that you create within the app.
• Session tokens: authentication tokens used to keep you signed in securely.

We do not collect your real name, phone number, email address, location, payment card details, or any government-issued identification.

2. How We Use Your Information

Your information is used solely to provide the Vault service:

• To authenticate your account and keep it secure.
• To store and display your transactions and bills.
• To enable joint account features so authorized members of your account can view shared data.
• To generate CSV exports of your transaction history on request.

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your financial data is only visible to:

• You.
• Other members of your joint account (if you have shared your invite code with them).

We do not share data with advertisers, analytics providers, or any external services.

4. Joint Accounts

If you share your account invite code with another person, they will be able to view and add to the transactions and bills associated with your account. You are responsible for choosing who you share your invite code with. You can see all members of your account from the Account tab at any time.

5. Data Storage and Security

Your data is stored in a secured database. Passwords are never stored in plain text — they are hashed using industry-standard cryptographic methods before storage. Session tokens are time-limited and can be invalidated by signing out.

While we take reasonable steps to protect your data, no method of electronic storage is 100% secure. We encourage you to use a strong, unique password for your account.

6. Data Retention

Your account data is retained for as long as your account is active. If you wish to have your data deleted, please contact us using the information below and we will remove your account and associated data promptly.

7. Children's Privacy

Vault is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of Vault after any changes constitutes your acceptance of the updated policy.