PocketVault Privacy Policy

Last Updated: November 28, 2025

Introduction

Welcome to "PocketVault" (hereinafter referred to as "this app"). We are deeply committed to protecting your privacy. This app is designed as an offline-first, secure password management tool. The core principle of this app is that your sensitive data is encrypted and stored exclusively on your device.

While your password vault remains entirely on your device and is never transmitted, we do use limited, anonymous diagnostic and usage data to improve the app's stability and features. This policy explains what data we do and do not collect.

1. Data Collection and Use

Data We DO NOT Collect (Your Encrypted Vault)

We do not collect, store, or have any access to your personally identifiable or sensitive information. This includes, but is not limited to:

• Your Master Password.
• Passwords, usernames, notes, attachments, and any other content you store in your vault.
• Personal details like your name, email address, or phone number.

All data you create is strongly encrypted and stored exclusively in the app's private local storage on your device. Only you can decrypt it with your Master Password.

Data We Collect Anonymously (For App Improvement)

To understand how our app performs and to fix bugs, we collect anonymous, non-personal data through third-party services. This data does not include any content from your vault and is not linked to you personally.

2. App Permissions

This app requests the following permissions for specific functionalities:

• Internet Access: Used solely for sending anonymous crash reports and usage statistics via Google Firebase. The app does not make any other network requests and does not use the internet to transmit your password data.
• Biometrics (Fingerprint/Face Unlock): Used strictly to verify your identity locally on the device to unlock your vault. We do not access or store your biometric data.

3. Third-Party Services

To maintain and improve the quality of our Service, we use the following third-party services:

• Google Analytics for Firebase & Firebase Crashlytics: Used for anonymous analytics and crash reporting.
  Google Privacy & Terms
• Data Export via System Share: You may choose to back up your encrypted data to third-party apps (such as Google Drive, Email, or other file managers) using the Android System Share functionality. This interaction is initiated solely by you. The app simply passes the encrypted file to the system, and you choose which destination app receives it.

4. Data Security

We employ enterprise-grade security measures to protect your local data vault:

• Zero-Knowledge Architecture: We have zero knowledge of your data. Decryption happens only on your device.
• Encryption Standards: We utilize Google Tink, a cryptographic library that implements AES-256 GCM encryption with HKDF streaming. This ensures your data is protected against tampering and unauthorized access.
• Secure Local Storage: Encrypted data is stored in the app's sandboxed storage area on your device.

5. Data Backup and Restoration

You can export your encrypted data vault as a file for backup. This backup file is encrypted with the same strong standards. You are responsible for storing this file securely. Losing your Master Password means losing access to your data, as there is no "password reset" feature for encrypted vaults.

6. Children's Privacy

This Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us via:

Email: richonenight@gmail.com