Privacy policy
Short version: the Vaultopaz app collects nothing and shares nothing. Purchases go through Google Play. Below are the details, for the app and for this website.
Who is responsible
Vaultopaz is made by Gino Romkes in the Netherlands. As the maker, he is responsible for the processing described on this page. Contact: support@vaultopaz.app.
The app
- Permissions. The only permission the app asks you for is the camera, so you can take photos that go straight into your vault encrypted. It also has the Google Play billing permission, which only lets it ask the Play Store app on your phone to handle a purchase. It has no internet permission, no storage permission (files come in through the Android file picker), no location and no contacts.
- Network. The app makes no network connections at all. There is no server, no account, no cloud, no crash reporting or analytics library and no advertising. Apart from the standard Android and Kotlin libraries, the only outside code in the app is the Google Play Billing library and the parts it depends on. One of those parts, Google’s own usage logging, asks for internet access. The app removes that permission, so that logging cannot reach the internet.
- Storage. Everything you add is encrypted and kept in the app’s private storage on your phone. Android’s own backup and device transfer are switched off for the app. An encrypted backup file exists only when you export one yourself, to a place you choose.
- Deleting. Uninstalling the app removes your vaults from the phone. Backup files you exported stay where you saved them until you delete them yourself.
- Data safety in Google Play. The app collects no data and shares no data. Purchases are handled by Google Play.
Purchases
Purchases in the app are handled by Google Play, under Google’s own terms and privacy policy. The app never sees your payment details. It only learns from the Play Store app on your phone which Vaultopaz purchases your Google account has made, and uses that on your phone alone, to switch Pro on.
In the Play Console, Google shows the maker the orders for Vaultopaz: what was bought, the amount, taxes, the date and the status. The maker can look up an order by its order number or by your full email address, for example when you ask for help with a purchase or a refund. These records are used only for that help and for the bookkeeping. The basis for this is the purchase agreement and the legal duty to keep accounts. Order numbers and amounts in the bookkeeping are kept for seven years, because Dutch tax law requires it.
This website
This website uses no cookies, no analytics and no fonts or scripts from other servers. The web server keeps a technical log of requests (IP address, time, page and browser) to keep the site secure and to count clicks on the Google Play buttons. The basis for this is a legitimate interest: a safe site, and knowing which pages help people find the app. These logs are kept for at most 30 days. The server is rented from Hetzner, a German hosting company, and stands in Germany. Hetzner stores the logs for the maker and does not use them itself.
A click on a Google Play button takes you to Google Play, where Google’s privacy policy applies.
Your rights
You can ask which personal data the maker holds about you, and ask for it to be corrected, deleted or limited, object to its use, or ask for a copy. For the app there is usually nothing to find, because it keeps no data about you outside your phone. Write to support@vaultopaz.app. If you think your data is handled wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
When the app or this website changes in a way that touches your privacy, this page changes with it. The date at the top shows the latest version.
Contact
Questions about privacy: support@vaultopaz.app.