Privacy Policy

Effective Date: September 27, 2026

Last Updated: September 27, 2026

Welcome to Secure Vault. Your privacy and the security of your information are important to us. This Privacy Policy explains how we collect, use, store, protect, and share information when you use the Secure Vault mobile application, website, and related services (collectively, the "Service").

By using Secure Vault, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on how you use Secure Vault, we may collect the following categories of information.

1.1 Account Information

When you create or use an account, we may collect:

Name or display name
Email address
Phone number
Country or country code
Gender, where provided
Profile photo, where provided
Account authentication information
Account verification information

1.2 Authentication and Security Information

We may process information required to authenticate your account and protect the Service, including OTP verification information, login sessions, device information, security events, and related technical information.

OTP codes are used for authentication and verification purposes and are not intended to be used as your permanent password.

1.3 Vault and Credential Information

Secure Vault allows users to store passwords, login credentials, secure notes, and related information inside an encrypted vault.

Sensitive vault information is protected using the application's encryption architecture.

We do not intentionally use your stored passwords, vault contents, recovery secrets, or decrypted credential information for advertising, marketing, or personalized advertising purposes.

1.4 Device and Technical Information

We may automatically receive certain technical information when you use the Service, including:

Device type and model
Operating system and version
Application version
IP address
Network and connectivity information
Device or app identifiers
Advertising identifiers, where applicable
Crash and diagnostic information
Application usage information
Security and fraud-prevention information

2. How We Use Information

We may use information to:

Create and manage your account
Authenticate your identity
Provide access to your encrypted vault
Process email and phone verification
Send OTP codes
Send security and service notifications
Provide customer support
Deliver push notifications
Detect and prevent fraud and unauthorized access
Maintain and improve the Service
Diagnose technical problems
Analyze application usage and performance
Display advertisements where enabled
Comply with applicable legal requirements

3. Vault Security and Encryption

Security is a fundamental part of Secure Vault. Sensitive vault information is designed to be protected through encryption and appropriate security controls.

We do not intentionally use your passwords, OTP codes, recovery secrets, encryption keys, or decrypted vault contents for advertising or marketing purposes.

Administrative access to the Service does not automatically provide administrators with access to the plaintext contents of your encrypted vault.

You are responsible for protecting your account credentials, recovery information, and devices.

4. Google AdMob and Advertising

Secure Vault may display advertisements using Google AdMob and related Google advertising technologies.

Depending on the configuration enabled in the application, advertisements may include:

Banner advertisements
Native advertisements
Interstitial advertisements
App Open advertisements

Google and its advertising partners may process information associated with advertising requests, which may include device information, advertising identifiers, IP address, approximate location information, and information relating to advertising interactions.

Advertising data may be used to provide, measure, limit, and personalize advertisements depending on applicable settings, consent requirements, and user choices.

We do not intentionally send stored passwords, vault contents, recovery secrets, OTP codes, or decrypted credential information to Google for advertising purposes.

Google requires publishers using its products and services to disclose relevant data collection, sharing, and usage, including technologies such as cookies, IP addresses, identifiers, and similar technologies.

4.1 Personalized and Non-Personalized Ads

Depending on your location, applicable law, consent status, and our advertising configuration, you may receive personalized or non-personalized advertisements.

Where applicable, advertising personalization may be controlled through Google's consent and privacy mechanisms.

4.2 Advertising Consent

Where legally required, Secure Vault may use Google's User Messaging Platform (UMP), a certified consent management platform, or another appropriate consent mechanism to obtain and manage user choices regarding advertising and related data processing.

Users in the European Economic Area, the United Kingdom, and Switzerland may be presented with applicable consent choices before personalized advertising is served.

5. Firebase Analytics

Secure Vault uses Google Analytics for Firebase to understand application usage, improve functionality, monitor performance, and identify technical problems.

Depending on the application's configuration, Firebase Analytics may automatically process information such as:

App instance identifier
Advertising identifier
Masked IP address
Approximate or coarse location information derived from network data
App lifecycle events
Session information
Screen or application interaction information

Firebase Analytics may also process additional information depending on the events and configuration implemented by Secure Vault.

Analytics information is used to understand how the application is used, improve reliability, and improve the overall user experience.

We do not intentionally send passwords, vault ciphertext, recovery secrets, OTP codes, or decrypted credential contents to Firebase Analytics.

6. Firebase Cloud Messaging (FCM)

Secure Vault uses Firebase Cloud Messaging (FCM) to deliver push notifications to supported devices.

FCM may process information required to deliver notifications, such as device/app identifiers, registration tokens, notification information, and technical delivery information.

Push notifications may be used for:

Security notifications
Account notifications
Support ticket notifications
Service updates
Other notifications requested or enabled by the Service

We take care not to place sensitive vault passwords, encryption keys, or other highly sensitive credential information into standard push notification content.

7. Email Services - Resend

Secure Vault may use Resend as an email delivery service.

Resend may process information necessary to deliver emails on our behalf, including email addresses and email delivery metadata.

Email services may be used for:

Email verification
OTP delivery
Password reset or account recovery communications
Security notifications
Support communications
Other transactional emails

We do not intentionally send stored vault passwords, decrypted credentials, or encryption keys through ordinary transactional email.

8. SMS and OTP Services - Twilio

Secure Vault may use Twilio to deliver SMS messages and OTP verification codes.

When SMS services are used, Twilio may process information necessary to provide the communication service, including phone numbers, routing information, message status, timestamps, and related communications metadata.

Twilio may process this information as a service provider acting on our instructions, subject to the applicable terms and privacy requirements.

Twilio is used for purposes such as:

Phone number verification
OTP delivery
Account authentication
Security-related SMS notifications

We do not intentionally send stored vault passwords, encryption keys, or decrypted vault credentials through SMS.

9. Other Third-Party Service Providers

We may use trusted third-party service providers to operate, secure, maintain, and improve Secure Vault.

Depending on the features enabled, these providers may provide:

Cloud infrastructure
Storage services
Email delivery
SMS and OTP delivery
Push notifications
Analytics
Advertising
Security and monitoring

These providers may process information according to their own privacy policies and applicable contractual or legal requirements.

10. Data Sharing

We do not sell your personal information as a general business practice.

Information may be shared with service providers and technology partners when necessary to provide, secure, maintain, or improve the Service.

Advertising partners such as Google may receive information necessary to provide and measure advertising in accordance with applicable configurations, consent requirements, and their policies.

We may also disclose information when required by law, legal process, court order, governmental request, or when reasonably necessary to protect the rights, safety, security, and integrity of Secure Vault and its users.

11. Cookies and Similar Technologies

Our website and certain third-party services may use cookies, local storage, SDKs, device identifiers, pixels, web beacons, or similar technologies for functionality, security, analytics, advertising, and preference management.

Google advertising technologies may use cookies, identifiers, IP addresses, or similar technologies where applicable.

12. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

Security measures may include:

Encryption
Secure authentication
Access controls
Secure communications
Rate limiting
Security monitoring
Audit logging
Fraud and abuse prevention

No Internet transmission or electronic storage system can be guaranteed to be completely secure. Therefore, we cannot guarantee absolute security.

13. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests.

Retention periods may vary depending on the type and purpose of the information.

14. Account Deletion

You may request deletion of your Secure Vault account using the account deletion functionality provided by the Service.

When an account deletion request is completed, account information and associated vault and device information may be permanently deleted in accordance with our account deletion process.

Certain limited information may be retained where necessary for legal, security, fraud-prevention, dispute-resolution, or regulatory purposes.

Deleted vault information may not be recoverable. Please make sure you understand the consequences before permanently deleting your account.

15. Children's Privacy

Secure Vault is not intended to knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

We do not knowingly use children's personal information for personalized advertising where prohibited by applicable law.

If you believe that a child has provided personal information to us in violation of applicable requirements, please contact us.

16. Your Privacy Choices

Depending on your location and applicable law, you may have rights or choices relating to your personal information, including rights to access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

Where applicable, users may also manage advertising and privacy choices through Google's privacy and consent mechanisms and controls provided within the Service.

17. International Data Processing

Depending on the location of our infrastructure and service providers, your information may be processed or stored in countries other than your country of residence.

Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, technology, legal requirements, or our privacy practices.

When material changes are made, we may update the "Last Updated" date and provide additional notice where required.

19. Contact Us

If you have questions, concerns, privacy requests, or complaints regarding this Privacy Policy or your personal information, please contact us:

Service: Secure Vault
Email: support@securevault.click
Website: https://app.securevault.click/

20. Third-Party Privacy Information

Third-party services used by Secure Vault may have their own privacy policies and terms. Users are encouraged to review the applicable policies of these providers.

Google / AdMob
Google Analytics for Firebase
Firebase Cloud Messaging
Resend
Twilio

These third-party providers may update their services, technologies, and privacy practices from time to time.

By using Secure Vault, you acknowledge that you have read and understood this Privacy Policy.