PRIVACY POLICY

Your data stays
on your device.

SecureVaultX is a local-first password manager. We have no servers, no accounts, and no way to access your vault โ€” by design.

EFFECTIVE June 2026
VERSION 1.0
PACKAGE com.veyoraa.securevaultx
TL;DR โ€” THE SHORT VERSION
No data collected or uploaded
No accounts or sign-up required
No analytics or tracking SDKs
No third-party data sharing
AES-256 encryption on device
Biometrics stay on your device
01 Overview
WHO WE ARE

SecureVaultX is an independent Android application for storing passwords, notes, and files securely on your device. The app is developed and maintained as a solo project under Phoenix Vex.

This Privacy Policy explains what information the app accesses, how it is used, and โ€” most importantly โ€” what we never do with it.

02 Data the app accesses
Data type Purpose Uploaded? Stored
Passwords & usernames Core vault functionality NEVER LOCAL ONLY
Secure notes Note storage NEVER LOCAL ONLY
Files & attachments Drive vault feature NEVER LOCAL ONLY
Documents Document vault feature NEVER LOCAL ONLY
Biometric data Unlock authentication NEVER OS keystore only
Device storage Backup export / import NEVER User-chosen location
03 What we never do
๐Ÿšซ
No data collection
We do not collect, transmit, or store any of your vault data on external servers. There are no servers.
๐Ÿ“Š
No analytics or crash reporting
SecureVaultX contains no analytics SDKs (no Firebase, no Crashlytics, no Amplitude). Crashes are not reported anywhere.
๐Ÿค
No third-party sharing
We do not share, sell, rent, or trade your data with any third party under any circumstances.
โ˜๏ธ
No cloud sync
The app has no cloud sync feature. Backup files are created locally and shared only when you explicitly trigger an export.
๐Ÿ‘ค
No accounts required
SecureVaultX requires no account creation, no email address, and no personal information to use.
04 Encryption & security
๐Ÿ”
AES-256 encryption at rest
All vault data โ€” passwords, notes, and files โ€” is encrypted using AES-256 before being written to device storage. Keys are derived from your master password and stored in the Android Keystore.
๐Ÿ‘†
Biometric authentication
Fingerprint and face authentication are handled entirely by the Android BiometricPrompt API. Biometric data never leaves the device's secure enclave and is never accessible to the app.
๐Ÿ”‘
PBKDF2-SHA256 PIN hashing
Passcodes are hashed using PBKDF2-SHA256 with 600,000 iterations โ€” meeting OWASP 2023 minimums โ€” processed in a background isolate to prevent brute-force attacks.
๐Ÿ“ธ
Screenshot protection
FLAG_SECURE is applied by default, preventing screenshots, screen recording, and app-switcher previews of vault content.
05 Android permissions
Permission Why it's needed
USE_BIOMETRIC Fingerprint / face unlock via Android BiometricPrompt
USE_FINGERPRINT Compatibility with older Android versions
READ/WRITE_EXTERNAL_STORAGE (โ‰ค Android 10) Backup export to Downloads on legacy devices only
READ_MEDIA_* File picker for importing backup files
VIBRATE Haptic feedback on passcode input
RECEIVE_BOOT_COMPLETED / WAKE_LOCK / FOREGROUND_SERVICE / FOREGROUND_SERVICE_DATA_SYNC Automatic Backup (Pro) scheduling and running as a background service, including after a reboot
POST_NOTIFICATIONS Shows the "Backing up your vaultโ€ฆ" progress notification while Automatic Backup runs
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS Lets Automatic Backup (Pro) run reliably in the background if you opt in
INTERNET Google Fonts (loaded at build time, not runtime) and Google Play Billing for Pro and coffee-tip purchases
06 Backup files
EXPORT

When you export a backup, the app creates an encrypted .svx file protected by a password you choose. This file is saved locally via the Android share sheet โ€” you decide where it goes (Downloads, Google Drive, etc.). We never receive a copy.

IMPORT

When you import a backup, the file is decrypted on-device using the password you provide. No data is transmitted during this process.

AUTOMATIC BACKUP (PRO)

If you enable Automatic Backup, encrypted backup files are created on a schedule and saved directly to a local folder on your device (Download/SecureVaultX). You can choose what's included (everything, passwords & notes only, or excluding videos) in Settings โ†’ Automatic Backup โ†’ Backup Content. This happens entirely on-device โ€” no backup file, encrypted or otherwise, is ever uploaded anywhere by us.

07 In-app purchases
PRO โ€” ONE-TIME PURCHASE

The Pro upgrade (one-time payment) unlocks App Disguise and Automatic Backup together, processed entirely through Google Play Billing. SecureVaultX never handles payment information directly. We receive only a confirmation that a purchase was made โ€” no card, bank, or payment details.

BUY ME A COFFEE โ€” OPTIONAL TIPS

SecureVaultX also offers optional, repeatable tip purchases (Small/Medium/Large "coffee") through the same Google Play Billing system. These are entirely separate from Pro: tipping unlocks no feature and is never required. Each tip is a standalone, one-time, re-purchasable transaction โ€” you can tip more than once if you'd like.

REFUNDS

Refunds for both Pro and coffee-tip purchases are handled entirely by Google Play under their standard refund policy. Phoenix Vex does not process refunds directly. To request a refund, visit Google Play's refund centre or contact Google Play support. EU/EEA users are entitled to a 14-day statutory right of withdrawal under EU consumer law.

DATA FROM PURCHASES

Google Play Billing may share with us a purchase token confirming a completed transaction. This token is used solely to verify and unlock Pro features on your device. No personal payment data โ€” including card numbers, bank details, or billing addresses โ€” is ever received or stored by Phoenix Vex.

08 EU & EEA users
DIGITAL SERVICES ACT (DSA)

SecureVaultX is available to users in the European Union and European Economic Area. In compliance with the EU Digital Services Act, Phoenix Vex operates as an individual developer (non-trader) publishing a free app with optional in-app purchases processed entirely by Google Play.

GDPR โ€” YOUR RIGHTS

Since SecureVaultX collects no personal data, there is no personal data for us to provide, correct, or delete on our end. All your vault data exists exclusively on your device. You can delete all data at any time by uninstalling the app or using Settings โ†’ Wipe Vault. For any GDPR-related enquiries, contact us at the email below.

14-DAY RIGHT OF WITHDRAWAL

EU/EEA consumers have the right to withdraw from a digital purchase within 14 days without giving a reason. Refunds are processed by Google Play. Contact Google Play support or visit your Google Play account to exercise this right.

NO GEO-BLOCKING

SecureVaultX is available equally to all users across the 27 EU member states without discrimination based on nationality, place of residence, or establishment, in compliance with EU Geo-blocking Regulation (EU) 2018/302.

09 Data deletion
๐Ÿ—‘๏ธ
Delete everything instantly
Go to Settings โ†’ Wipe Vault to permanently delete all vault data from your device. This action is irreversible.
๐Ÿ“ฒ
Uninstall removes all data
Uninstalling SecureVaultX removes all locally stored vault data permanently. Since we have no servers, there is nothing to delete on our end.
๐Ÿ’พ
Backup files
Any .svx backup files you exported are stored at a location you chose (e.g. Downloads). Delete them manually from your file manager if no longer needed.
10 Children's privacy
AGE REQUIREMENT

SecureVaultX is intended for users aged 13 and older. We do not knowingly collect any personal information from children under 13. Since the app collects no personal data from any user, this is satisfied by design. If you believe a child has made a purchase through the app, please contact Google Play support for refund assistance.

11 Changes to this policy
UPDATES

If this Privacy Policy changes materially, the updated version will be posted at this URL with a new effective date. Continued use of the app after any changes constitutes acceptance of the updated policy. We will notify users of significant changes via an in-app notice where possible.

12 Contact
โœ‰๏ธ

Questions or concerns?

If you have any questions about this Privacy Policy or SecureVaultX's data practices, reach out to us directly.

support@veyoraa.in