Privacy Policy

Vaulta Life ("Vaulta", "we", "us") is a zero-knowledge encrypted vault. This policy explains what we collect, why, and the choices you have. We built Vaulta so that we technically cannot read your files — see our Dual-Cloud Privacy page for the architecture detail.

Information we collect

• Account data. The email address and password you use to register, an optional display name, and hashed answers to any recovery security questions you set. Passwords and answers are stored only as salted hashes.
• Vault key & metadata.For each file you store, we keep a small (<1KB) encryption key blob and metadata such as the file name, category, and the cloud folder locations you chose. We do not store your file contents.
• Diagnostic data. Basic, non-identifying logs needed to operate the service (e.g. error events). We do not use third-party advertising or analytics SDKs.

What we never collect

• Your cloud-drive credentials. When you connect Google Drive, Dropbox, iCloud, or S3, authentication happens in your own session via the provider — Vaulta never sees your username or password.
• Your decrypted file contents. Files are encrypted on your device with AES-256-GCM (or ChaCha20-Poly1305) before they leave it.
• The ability to reconstruct your files. The key we hold is useless without the ciphertext stored in your own clouds.

How we use your information

We use account data to authenticate you and let you recover access; the key blob and metadata to let you list, open, and restore your files; and diagnostic data to keep the service running and secure. We do not sell your data or share it with advertisers or data brokers. We disclose data only where required by valid legal process.

Your choices & deleting your account

You can permanently delete your account at any time inside the app: Settings → Delete Account. This removes your account and the key blobs and metadata we hold for you from our servers and cannot be undone. Files stored in your own connected clouds remain in those clouds until you delete them there. To request a copy of the data associated with your account, email privacy@vaulta.jovimastery.com.

Data retention

We retain your account data and key/metadata for as long as your account is active. When you delete your account, this data is removed from our production systems. Backups are rotated on a rolling basis and purged in the ordinary course.

Security & international transfers

Data in transit is protected with TLS. Account data and key blobs are held by our infrastructure providers (including Supabase) and may be processed in the United States. We apply access controls and encryption appropriate to the sensitivity of the data.

Children

Vaulta is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.