VaultBox

1. Who We Are

VaultBox (“we”, “our”, “us”) is a private photo and video vault application developed for Android. Our application ID is com.primio.vaultbox.fgxodw. By using VaultBox, you agree to this Privacy Policy.

2. Information We Collect

Specifically, VaultBox does not collect:

• Your name, email address, phone number, or any contact information
• Your photos, videos, or any media content you store in the vault
• Your PIN or any authentication credentials
• Your device identifiers (IMEI, advertising ID, etc.)
• Your location data
• Your usage patterns, session data, or in-app behaviour
• Your IP address or network information
• Diagnostic logs, crash reports, or performance data

3. How Your Data Is Stored

All data generated by VaultBox is stored exclusively on your device in the application's sandboxed private storage directory. This includes:

Media Files

Photos and videos you import into VaultBox are copied into the app's private storage (getApplicationDocumentsDirectory()). These files are inaccessible to other apps on your device. They are named using randomly generated UUIDs (e.g., f47ac10b-58cc.jpg) to avoid easy identification.

Your PIN

Your 4 or 6-digit PIN is stored using Flutter Secure Storage, which uses Android Keystore (hardware-backed encryption when available) on Android. Your PIN is never stored as plain text anywhere on the device.

Vault Metadata

A list of your vault items (file names, types, and timestamps) is stored locally in SharedPreferences as a JSON list. This data never leaves your device.

Premium Status

Whether you have purchased the Premium upgrade is stored locally on your device via SharedPreferences and verified through Google Play's billing library. We do not store or process any payment information — all transactions are handled entirely by Google Play.

4. Internet Access & Network Permissions

VaultBox requests the INTERNET permission for the sole purpose of communicating with Google Play for in-app purchase verification. This occurs only when you initiate or restore a purchase. No other network traffic is initiated by the app at any time.

5. In-App Purchases

VaultBox offers a one-time Premium upgrade ($2.99) through Google Play's in-app billing system. All payment processing is handled exclusively by Google. VaultBox does not receive, store, or process any payment card information or billing details. Purchase verification is performed locally using Google Play's billing library. Please refer to Google's Privacy Policy for information about how Google handles purchase data.

6. Permissions Requested

VaultBox requests only the minimum permissions necessary to function:

• READ_MEDIA_IMAGES / READ_MEDIA_VIDEO (Android 13+) or READ_EXTERNAL_STORAGE (Android 12 and below) — to allow you to import photos and videos from your device gallery into the vault.
• INTERNET — solely for Google Play in-app purchase communication as described above.

We do not request camera permissions, microphone permissions, contacts access, location access, or any other sensitive permissions.

7. Children's Privacy (COPPA)

VaultBox does not knowingly collect any information from anyone, including children under the age of 13. Because we collect no personal information whatsoever, the app is compliant with the Children's Online Privacy Protection Act (COPPA). The app is rated for users 12 and older on Google Play due to the nature of the content it can store.

8. GDPR Compliance

Because VaultBox collects no personal data and no data leaves your device, there is no personal data processing subject to the General Data Protection Regulation (GDPR). We do not act as a data controller or data processor for any personal information. EU users can use VaultBox with full confidence that no personal data is transmitted outside their device.

9. California Privacy Rights (CCPA)

VaultBox does not sell, share, or disclose personal information to third parties. Because we collect no personal information, there is nothing to disclose, delete, or opt out of. California residents have no action required under the CCPA in connection with VaultBox.

10. Data Security

While no method of storage is 100% secure, we implement strong security measures for all locally stored data:

• PIN stored with Android Keystore hardware-backed encryption via Flutter Secure Storage
• Media files stored in the app's private sandbox, inaccessible to other applications
• No cloud backup or sync — data cannot be accessed remotely under any circumstances
• No data is transmitted over any network during normal vault use

11. Data Retention & Deletion

All data stored by VaultBox exists solely on your device for as long as you choose to keep the app installed. You can delete individual vault items at any time within the app. Uninstalling VaultBox will permanently delete all vault data, your PIN, and all imported media from your device. This action is irreversible — we cannot recover your data as we have no copy of it.

12. Third-Party Services

VaultBox integrates only with Google Play for in-app purchases. No other third-party SDKs, analytics platforms, advertising networks, or social media integrations are included in the app. The following third-party service has its own privacy policy:

• Google Play Billing — Google Privacy Policy

13. Changes to This Policy

If we update this Privacy Policy, we will update the “Last Updated” date at the top of this page and, where required by law, notify users in-app. Continued use of VaultBox after any changes constitutes your acceptance of the updated policy. We will never change our policy to collect personal data without your explicit consent.

14. Contact Us

If you have any questions about this Privacy Policy, you can contact us at:

This privacy policy was last reviewed on July 31, 2025 and is effective immediately.