Privacy Policy
Revision dated 6 October 2026. Applies to the Vault application (Android, desktop) and the vault-msg.tech website.
In short: we do not collect your data. Messages are encrypted on your device, keys never leave it, and Vault has no server that stores your conversations, contact list or communication metadata. The only server-side component is a delivery relay that handles already-encrypted envelopes and keeps them for no longer than 24 hours.
1. Who we are
Vault is developed and distributed by an individual entrepreneur (sole proprietor) (hereinafter "we", "the Developer"). Contact details for data protection matters are listed in section 10.
2. The core architectural principle
Vault is built so that the Developer technically cannot access the content of your conversations:
- Encryption happens on your device before sending. Only an encrypted envelope leaves your device.
- Encryption keys are generated on the device and are never transmitted to us or to any third party.
- The transport is your own email (or a third-party mail service you choose yourself). Messages live in your mailbox, not on our servers.
- We have no user database, no profiles, no address book and no message history.
3. What we do NOT collect
We do not collect or request:
- the content of messages, attachments, calls or group chats;
- your address book or contact list;
- phone numbers or SIM data;
- location data;
- advertising identifiers or ad-tracking data;
- browsing history or in-app behaviour for marketing purposes;
- files and photos other than those you explicitly choose to send.
The app contains no advertising SDKs, no analytics SDKs and no third-party trackers.
4. What data is processed and why
4.1 Data that stays on your device
| Data | Where it is stored | Who can access it |
|---|---|---|
| Encryption keys | Local app storage | Only you (on your device) |
| Message history | Local app database and your mailbox | Only you |
| Contacts, groups, channels | Local app database | Only you |
| Settings and profile | Local app database | Only you |
4.2 Delivery relay data (the only server-side component)
The relay exists to deliver messages faster than email alone. It works only with encrypted envelopes:
- Encrypted envelope — stored for no longer than 24 hours and deleted once delivered to the recipient. The relay cannot read the contents: it has no key.
- Technical delivery identifier (a pseudonymous token derived from the public key fingerprint) — used to determine which device an envelope is addressed to and to prevent abuse. It contains no name, phone number or email address in plain form.
- Technical logs — anonymised request counters and rate limiting (protection against overload and spam). Retained for a limited time.
The relay is optional: settings include an email-only delivery mode. In that case messages travel directly between mailboxes and no Vault server-side component is involved at all.
4.3 Notifications
To deliver notifications about new messages and incoming calls, the app may use:
- local notifications — generated on the device; nothing leaves it;
- a push notification service — only a technical "new event" signal and a pseudonymous device token are transmitted. Message text never passes through the server.
5. App permissions and their purpose
| Permission | Why it is needed | Required? |
|---|---|---|
| Internet | Exchange of encrypted envelopes via your email and the relay | Yes |
| Camera | Scanning a QR code when adding a contact; video in calls | No — only when the feature is used |
| Microphone | Voice messages and calls | No — only when the feature is used |
| Notifications | Alerts about new messages and incoming calls | No — can be disabled in system settings |
| Files and media | Sending files you select and saving received ones | No — only when the feature is used |
Access to the camera, microphone and files is requested at the moment the corresponding feature is used, not on first launch.
6. Sharing data with third parties
We do not sell or share your data with third parties. Sharing is technically possible only in the following cases, none of which involve the content of your conversations:
- Your email provider — processes messages as ordinary email under its own privacy policy. You choose the provider yourself.
- The push notification provider — receives a technical signal and a pseudonymous device token (see 4.3).
- Legal requirements — if a lawful request is received, we can only disclose what we hold. Since we hold neither message content nor keys, providing them is technically impossible.
7. How long data is retained
- On-device data — until you delete it or uninstall the app.
- Encrypted envelopes on the relay — no longer than 24 hours.
- Relay technical logs — for a limited period, after which they are deleted or anonymised.
8. Your rights
At any time you can:
- delete all local history and data in the app settings;
- export a backup of your data;
- disable the relay and use email only;
- revoke any permissions in system settings;
- uninstall the app — this deletes the local keys and database along with it.
Important: encryption keys are stored only on your device. If you uninstall the app without a backup and without your recovery key, restoring access to old conversations will be impossible — not as a limitation, but as a consequence of no one but you holding the keys.
9. Children
The app is not intended for children under 13 and does not knowingly collect data about them. Since we collect no personal data at all, no special procedures are required.
10. Contact
Questions about data processing and this policy:
- Email: support@vault-msg.ru
- Website: vault-msg.tech
11. Changes to this policy
The current revision is always published at vault-msg.tech/privacy.html. For material changes we update the revision date at the top of the document. By continuing to use the app after a new revision is published, you agree to the updated terms.