Vaulta — Privacy Policy
This Privacy Policy explains how Vaulta (the "App", package id com.zentryx.vault), developed and published by Zentryx ("we", "us", "our"), handles your information on Android and iOS. It applies only to Vaulta; our other products and website are covered by the Zentryx general Privacy Policy.
At a glance
- Your personal data never leaves your device
- No account or sign-up required
- No advertising
- No data is ever sold
1. Summary
Vaulta is built for privacy: your documents are stored only on your device, OCR runs entirely on-device via Google ML Kit, and nothing is ever uploaded to any server. Zentryx cannot see, access, or recover your documents.
2. Information the App handles
- Documents & metadata you add (on-device only): Scanned or imported documents, extracted OCR text, titles, categories, expiry dates, and family-profile labels. Stored locally on your device only.
2.1 What we do not collect
- No documents, images, or OCR text ever leave your device.
- No account, name, email, or phone number is collected.
- No analytics, ads, or tracking SDKs are embedded.
- We do not sell personal data — we never possess it in the first place.
3. Permissions the App requests — and why
Vaulta requests only the permissions needed for the features you use. You can revoke any permission at any time in your device settings; the related feature simply stops working.
- Camera (optional) — Only when you scan a document. Processing happens on-device; frames are not transmitted.
- Biometric / fingerprint — Unlocks the vault. Biometrics are verified by Android itself and never leave the secure hardware.
- Notifications — Expiry reminders for documents you set.
- Internet — Used only to open government service links (e.g., NADRA, FBR) in your browser. The app itself uploads nothing.
4. Third-party services
The App relies on the following third-party services:
- Google ML Kit (on-device) — Text recognition (OCR) runs fully on-device. Document content is not sent to Google. Privacy policy.
- Google Play services — App distribution, updates, and aggregate crash/ANR reports provided by the Google Play Store. Privacy policy.
5. Where your data is stored
Documents and metadata are stored in a local database on your device. There is no cloud component.
6. Data retention & deletion
Delete documents inside the app, or uninstall the app to remove the entire vault immediately. Because nothing is stored server-side, deletion is instant and complete.
You may also contact us at i.muhammad.ahmad443@gmail.com with any data-deletion request; we respond within 30 days.
7. Security
We follow privacy-by-design principles: data minimisation, on-device processing wherever possible, encryption in transit (TLS 1.2+) for any network feature, and regular dependency patching. No method of storage or transmission is 100% secure, but the most effective safeguard in Vaulta is structural — we simply do not collect what we do not need.
8. Children's privacy
The App is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided personal data through the App, contact us and we will delete it.
9. Changes to this policy
We may update this policy as the App evolves. Material changes will be reflected on this page with a new "Last updated" date. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
10. Contact us
- Developer: Zentryx, Islamabad, Pakistan
- Email: i.muhammad.ahmad443@gmail.com
- Website: zentryx-app.netlify.app