Privacy Policy

Effective Date: August 6, 2026

App Name: Vylt

Developer/Provider: IV Digital LLC

Contact: [email protected]

This Privacy Policy explains how information is handled when you use Vylt. If you do not agree with this Policy, do not use the App.

---

1. Privacy Philosophy (The Zero-Knowledge Standard)

Vylt is designed as a local-only, offline-first, zero-knowledge application. Our architecture is built to ensure that your data remains yours alone.

This means:

• No Accounts: We do not require or support user accounts.
• No Servers: We do not operate servers to store, sync, or transmit your files.
• No Access: We have no technical ability to access your encrypted files, thumbnails, or keys.
• Architecture-First: Your privacy is protected by the app's fundamental design, not just policy promises.

2. Information We Do NOT Collect

Vylt does not collect, transmit, or store the following on any external server:

• Your files, photos, videos, or documents
• Encryption keys, PINs, or recovery passphrases
• Notes or passwords stored within the app
• Personal identifiers (name, address, phone number)
• Location data or browsing history

3. Information Stored Locally on Your Device

To function, Vylt stores the following data only on your device's internal storage:

• Encrypted Content: All files, notes, and passwords are encrypted using hardware-backed AES-256-GCM.
• Security Keys: Encryption keys are managed by your device's hardware-backed secure storage — the Android Keystore on Android, and the Secure Enclave / Keychain on iOS.
• App Configuration: This includes your theme preferences, security toggles (e.g., biometric unlock), and storage settings.
• Isolation: If you utilize the optional Decoy Vault, that data is stored in a separate, isolated local directory.

4. User-Initiated Backups and Sharing

Vylt provides tools for you to manage your data, but these are 100% user-controlled:

• Manual Backups: Encrypted backups (.vaultbackup) are created only when you initiate them. You choose the destination (e.g., your SD card or a personal cloud drive). We never receive these files or your backup passphrases.
• Secure Sharing: When you create a Secure Share package (.vss or .vaultfile), the app generates an encrypted container. Transmission of this file is handled by third-party apps you select (Email, Messenger, etc.). Vylt does not track who you share with or what you share.

5. Network Activity and Third-Party Services

Vylt is designed to function entirely offline. However, it interacts with the following system-level services:

• In-App Purchases: Vylt Pro is processed by your platform's app store — Google Play Billing on Android, or Apple's App Store (StoreKit) on iOS. Transaction data is handled by Google or Apple under their respective privacy policies; we receive only your entitlement status, never your payment details.
• QR Scanning: The optional QR scanner used for public-key exchange runs entirely on-device — via Google's ML Kit (updated through Google Play Services) on Android, and Apple's Vision framework on iOS. No scanned image data is transmitted.
• No Analytics: Vylt does not include third-party tracking or behavioral analytics SDKs.

6. Support Communications

If you choose to use the "Contact Support" feature:

• An email template is created on your device.
• Basic technical metadata (app version, operating system version, and device model) is pre-filled to help us troubleshoot.
• This data is only sent to us if you explicitly tap "Send" in your email app.

7. Legal Compliance and Law Enforcement

Because Vylt is a zero-knowledge app, we do not possess your data. We cannot comply with requests to provide, decrypt, or retrieve your files because we do not have the keys and the files never leave your device. We can only provide information we actually possess, such as basic support emails you have sent to us.

8. Data Retention and Security

• Retention: We do not retain user data because we do not collect it. Your data remains on your device until you delete it or uninstall the app.
• Responsibility: Device security is your responsibility. Use of the app on rooted, jailbroken, or otherwise compromised devices may weaken the protections provided by Vylt.

9. Changes to This Policy

We may update this Privacy Policy to reflect app updates. Material changes will be notified in-app. Continued use of Vylt after the "Effective Date" constitutes acceptance of the new terms.

10. Contact

For questions regarding this policy or your privacy, please contact:
Email: [email protected]