Privacy Policy

Overview

StealthVault is a private, encrypted media vault. Your vault content — photos, videos, albums, tags, and browsing data — is encrypted on your device and never leaves it unless you explicitly initiate a device-to-device sync or portal session on your local network. We never transmit your media to external servers.

To keep the app stable and free, we use two third-party services from Google that collect limited, non-content data: Firebase Crashlytics (crash and diagnostic data) and Google AdMob (advertising). These are described below. They never receive your vault content.

Data Stored on Your Device

The following data is stored locally on your device only, encrypted at rest:

• Media files (photos and videos) you import into the vault
• Album names and organization
• Tags and metadata you assign to media
• Browser history and bookmarks from the in-app browser
• Your vault passcode (stored as a derived key — never in plaintext)

Encryption

Media is encrypted with AES using a random data encryption key (DEK) that is itself wrapped by a key derived from your passcode. The DEK is held in memory only while the vault is unlocked and is zeroed out on lock. Encrypted blobs are stored in the app's private documents directory — inaccessible to other apps.

Network Access

StealthVault requests network access for two optional features only:

• Web Portal — starts a local HTTP server on your device so you can access your vault from a browser on the same Wi-Fi network. No data is routed through the internet.
• Device Sync — transfers encrypted media between two devices on the same local network using a pairing code. No data is routed through the internet.

Both features are opt-in and off by default. Neither transmits data to any external server.

In-App Browser

The built-in browser is a WebView with ad blocking. It does not use a proxy or VPN — it makes requests directly from your device. Browsing history and bookmarks are stored locally in the encrypted vault database. No browsing data is sent to us.

Subscriptions

StealthVault uses RevenueCat to manage in-app subscriptions. RevenueCat processes purchase data through Apple App Store or Google Play. Their privacy policy applies to that transaction data. We receive only an anonymous entitlement status — no payment details.

Crash Reporting

StealthVault uses Firebase Crashlytics (a Google service) to collect crash reports and diagnostic data so we can fix bugs and improve stability. This may include device model, operating system version, app version, and the technical state of the app at the time of a crash. It never includes your vault content (your media, albums, tags, or browsing data). Crashlytics data is processed by Google under Firebase's privacy and security terms.

Advertising

StealthVault displays a single banner ad through Google AdMob, configured to request non-personalized ads only. We do not ask for tracking permission and do not use your device's advertising identifier to profile you — the app declares "no tracking" in its iOS privacy manifest. To serve a non-personalized ad, AdMob receives only coarse contextual information (such as approximate region derived from your IP and general device type) and an identifier used for frequency capping and fraud prevention; it is never used to build a profile of you. AdMob never receives your vault content. Google's use of this data is governed by the Google Ads policies. A paid subscription removes ads entirely.

Permissions

• Photo Library — to import media into the vault and optionally delete originals after import.
• Camera — to capture media directly into the vault (if implemented).
• Face ID / Biometrics — to unlock the vault without typing your passcode. Biometric data never leaves the device's secure enclave.
• Local Network — for the Web Portal and Device Sync features.

Age Requirement

StealthVault is intended for adults aged 18 and over and is rated 17+. The app is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18.

Changes

If this policy changes materially, the updated date above will reflect that. Continued use of the app after changes constitutes acceptance.

Contact

Questions? Email [email protected].