Privacy Policy

1. Introduction

eVault ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains our data practices and your rights regarding the personal information we collect through our mobile application.

By using eVault, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our app.

2. What Information We Collect

2.1 Information You Provide

When you create an account and use eVault, you may provide:

• Email address (for account creation and recovery)
• Master password (never stored, only verified)
• Encrypted vault data (notes, passwords, todos)
• Device information (for crash reporting)
• Usage analytics (anonymized)

2.2 Automatically Collected Information

We automatically collect certain information about your device and how you interact with eVault:

• Device type and operating system version
• App version and build number
• Crash logs and error reports
• General usage patterns (anonymized)
• IP address (for security purposes only)

3. How We Protect Your Data

3.1 End-to-End Encryption

All your vault data is encrypted locally on your device using AES-256 encryption before it ever leaves your phone. We use a zero-knowledge architecture, meaning:

• We never have access to your unencrypted data
• Only you can decrypt your vault
• Your encryption keys never leave your device
• Even our employees cannot access your data

3.2 Master Password

Your master password is never stored on our servers. We only store a cryptographic hash for verification purposes. This means if our servers were compromised, your data would remain secure.

3.3 Offline Functionality

eVault works completely offline. Your data is stored locally on your device, and synchronization is optional. You maintain full control over when and if your data is synced.

4. How We Use Your Information

We use collected information for:

• Providing and improving the eVault service
• Authenticating your account securely
• Syncing your encrypted data across devices (if enabled)
• Diagnosing and fixing technical issues
• Improving app performance and user experience
• Communicating important security updates
• Complying with legal obligations

We do NOT use your information for marketing, advertising, or selling to third parties.

5. Data Sharing and Third Parties

We do not share, sell, or rent your personal information to third parties. However, we may share information in the following circumstances:

• With law enforcement when legally required
• To comply with court orders or government requests
• With service providers who help us maintain eVault (under strict confidentiality agreements)
• In case of acquisition or merger (with prior notification)

Any third-party service providers have access only to information necessary to perform their services and are contractually obligated to maintain its confidentiality.

6. Data Retention

We retain your data only as long as necessary to provide eVault services:

• Your encrypted vault data is stored as long as your account is active
• Crash logs and analytics are deleted after 90 days
• Account metadata is deleted 30 days after account deletion
• If you delete your account, all associated data is permanently deleted

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: You can request a copy of your personal data
• Right to Correction: You can correct inaccurate information
• Right to Deletion: You can request deletion of your data
• Right to Portability: You can request your data in a portable format
• Right to Object: You can object to certain data processing

To exercise any of these rights, please contact us at privacy@evault.app

8. Children's Privacy

eVault is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately.

9. Security Measures

We implement multiple layers of security to protect your information:

• AES-256 encryption for all vault data
• TLS/SSL encryption for data in transit
• Regular security audits and penetration testing
• Secure authentication protocols
• Biometric authentication support
• Automatic session timeout

While we strive to protect your information, no security system is impenetrable. Please use a strong master password and enable biometric authentication for added security.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified to you via email or through the app. Your continued use of eVault after changes become effective constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

We will respond to your inquiry within 30 days.

12. Jurisdiction

This Privacy Policy is governed by applicable data protection laws including GDPR, CCPA, and other privacy regulations. If you are located in the EU, you have the right to lodge a complaint with your local data protection authority.