← Back to Vault Pure

Privacy Policy

Applies to the Android app "Vault Pure" (com.digitalemanufaktur.vaultpure)

Last updated: August 2026

1. Principle

Vault Pure collects, stores or transmits no personal data to us or to third parties. The app works entirely locally on your device. It needs no registration, no user account and no email address.

2. How your content is encrypted

Every file is encrypted with AES-256 in GCM mode. GCM detects later changes to the content, so a tampered file is rejected when read instead of being handed back silently altered.

Files are encrypted with a randomly generated master key. That key exists on the device only in encrypted form, protected by a key derived from your password (PBKDF2-HMAC-SHA256).

Your password is never stored in any form, not even as a hash. Without your password or your recovery key the data cannot be recovered, not even by us.

The optional recovery key is shown to you once and is likewise not stored. What is kept is only a copy of the master key encrypted with it.

3. No data collection, no tracking SDKs

The app contains no Firebase, no analytics SDK, no advertising IDs, no fingerprinting and no cross-app tracking. There are no ads.

4. Data stored locally

This data stays on your device only. It is also excluded from Android's automatic backup, so the system does not copy it into a Google account either.

5. Permissions

6. No cloud feature

Vault Pure offers no cloud sync and no cloud backup. You create backups yourself as a local file, which stays encrypted and stays wherever you put it.

7. Google Play Billing

The Pro version is purchased through Google Play Billing. The transaction is handled entirely by Google. We receive:

Google Play's privacy policy: policies.google.com/privacy

8. Review prompt

After certain actions the app may ask you for a rating through Google Play's in-app review feature. No data is processed by us; the flow happens entirely inside the Google Play app.

9. Children

The app collects no data — neither from children nor from adults.

10. Your rights

Under the GDPR you have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and to lodge a complaint with a supervisory authority (Art. 77).

Since we neither receive nor store any personal data about you, we cannot provide information about you and have nothing to erase — there simply is nothing here. You delete all data yourself by uninstalling the app or using "Reset vault".

11. Changes

If this privacy policy changes, the date above is updated. Since the app collects no data, substantial changes are not expected.

12. Contact & controller

Digitale Manufaktur Rudolstadt
August-Bebel-Strasse 35
07407 Rudolstadt, Germany

Email: support@digitale-manufaktur-rudolstadt.de
Website: digitale-manufaktur-rudolstadt.de