Privacy policy
Vaultify collects no data about you. There is no server to send it to.
Last updated: 26 October 2026 · Applies to Vaultify on Windows, macOS, Android and iOS.
The short version
Vaultify is an offline app. It has no accounts, no sync, no analytics, no advertising and no crash reporting. Nothing you type into it leaves your device. No one, including the developer, can read your vault.
What data Vaultify collects
None. Vaultify does not collect, transmit or share any personal data. There is no server component, so there is nowhere for data to go.
This is enforced by the app's design rather than by promise: the Android release
build does not request the INTERNET permission, so the operating system
will not let it open a network connection at all. The source code contains no
networking code, and anyone can verify both claims in the
public repository.
What is stored on your device, and where
| What | Where it is kept |
|---|---|
| Your vault: saved names, passwords, and any two-factor keys | One encrypted file in Vaultify's private storage area on your device |
| Your preferences: theme, auto-lock delay, generator defaults | The operating system's normal settings storage for the app |
| Your PIN or password | Nowhere. It is never saved — only used to derive the key that opens the vault |
The vault is encrypted with AES-GCM, using a key derived from your PIN or password with Argon2id. Because your PIN is never stored, a copy of the vault file is useless without it — and so is a vault whose file has been altered, which fails its integrity check instead of opening.
Permissions, and why each one exists
| Permission | Why |
|---|---|
| Camera (Android and iOS only, optional) | Only to scan a two-factor QR code when you choose to add one. Scanning happens entirely on the device; no image is saved, uploaded or sent anywhere. Declining the permission only means you paste the key by hand instead. |
| Biometrics / Face ID (mobile, optional) | To unlock the app with your fingerprint or face instead of typing your PIN. Your biometric data is handled entirely by the operating system; Vaultify never sees it and only receives a yes or no answer. |
Vaultify asks for no other permissions: no contacts, no location, no files, no internet.
Clipboard
When you copy a password or two-factor code, it goes to your device's clipboard so you can paste it. Vaultify clears the clipboard after a short delay, and on Android marks the content sensitive so it is kept out of clipboard previews and history. While it is on the clipboard, other apps on your device may be able to read it — this is how clipboards work on every operating system, so paste it promptly.
Backups you create
The export feature writes an encrypted backup file to a location you pick. That file is encrypted the same way as the vault, but once it leaves the app it is in your hands: if you store it in a cloud folder or email it to yourself, that service then holds the file. It stays unreadable without your password.
Children
Vaultify is a general-purpose utility, contains no advertising and collects nothing, so it is suitable for all ages and poses no specific risk to children.
Your rights
Rights such as access, correction, export and deletion normally require asking a company to act on data it holds about you. Vaultify holds none: your data is on your device, under your control. You can export it at any time from inside the app, and uninstalling Vaultify removes its vault and settings from the device.
Changes to this policy
If this policy changes, the updated version will be published on this page with a new date above, and the change will be visible in the repository's commit history.
Contact
Questions or concerns about privacy can be raised as an issue in the GitHub repository.