DigiVault – Privacy Policy

Effective 10 October 2026 · Applies to the DigiVault Android app (package com.dudhaiya.digivault)

DigiVault is a private, encrypted vault for photos, videos and documents. It is built so that your files stay on your phone. This page explains, plainly, what the app does with your data and what it does not.

The short version

• There is no account. You never give us a name, email, phone number or password.
• Your photos, videos and documents are encrypted and stored only on your phone. We do not have a copy. We could not read one if we did.
• The app has no analytics, no advertising, no crash reporting and no tracking of any kind.
• When you choose to share or sync a vault, the content travels end-to-end encrypted between phones and is not stored on any server.

What is stored on your phone

Everything you put in a vault is encrypted with AES-256-GCM using a key derived from your vault password (PBKDF2-HMAC-SHA256, 120,000 iterations). The password itself is never stored. Your vault database, thumbnails and media files live inside the app's private storage on your device – and, if you use backups, in the backup files described below. If you forget your password and do not have your recovery key, the contents cannot be recovered – by you or by anyone else.

Photos you import keep the information already inside them (date, camera model and so on), encrypted along with the photo and never read or sent by the app. On Android 11 and newer, Android removes the precise location tag before the app receives a photo, because DigiVault does not ask for the media-location permission. On Android 10 and older the tag stays inside the photo, encrypted with it.

Sharing and sync

You can share a vault by link, or keep a vault in sync with another person's phone. In both cases:

• Content is encrypted on your phone before it leaves, with a key that only the two phones hold. The key for a share link travels only inside the link itself, in a part of the address that is never sent to any server.
• The connection passes through a relay we operate on Cloudflare Workers. The relay forwards encrypted bytes between two live connections and stores nothing – not files, not thumbnails, not names, not lists. It has no database and no file storage of any kind. When either phone disconnects, the bytes are gone from it.
• The relay cannot decrypt anything. Neither can we.
• Someone opening a share link uses a viewer page served from the same address as the relay. The key never leaves their browser and the page decrypts locally – but that page is code we publish, so a share link asks the recipient to trust it, in the way any web page is trusted. Phone-to-phone sync does not involve it at all.
• Like any internet service, Cloudflare's infrastructure can see the IP addresses that connect and when. That is the ordinary metadata of an internet connection, not your content.

Sharing and sync only happen when you start them. If you never share, DigiVault never connects to our relay. Two things inside it do talk to Google, and neither can see a vault: Google Play Billing checks whether this Google account has bought the app, when the app starts; and the QR-code scanner used to pair two phones is Google's ML Kit, which may send Google anonymous usage and performance statistics about the scanner when you open it. It sees the pairing code, never your files.

Permissions, and why each one exists

DigiVault does not run in the background and posts no notifications. A share link streams only while DigiVault is open on your screen; when you switch to another app or lock the phone, the link pauses, and it resumes when you come back.

Backups and recovery keys

You can back up one vault, or every vault at once, and the app can do the all-vaults backup on a schedule if you switch that on. Every file inside a backup is encrypted exactly as it is in the vault and cannot be opened without that vault's password or recovery key. The backup file itself is a plain archive, so anyone who can read the file can see how many vaults it holds, how many items each one has, how big each item is and when it was added – not their names and not their contents.

Backups are written to the phone's Download/DigiVault folder, which other apps with storage access can read, and they stay there after DigiVault is uninstalled unless you delete them. On Android 9 and older the app cannot write there and offers the file to an app of your choice instead, so it ends up wherever you send it. Backup settings inside the app lists and deletes the ones it wrote – but after a reinstall Android no longer lets DigiVault manage files an earlier install wrote, so remove those with your Files app. Recovery keys are shown to you once and are never stored in readable form.

Payments

Purchases are handled by Google Play. The app never sees or stores your card or payment details.

Data we collect

None. The app does not transmit any information about you or your device to us. There is nothing for us to sell, share or lose.

Deleting your data

Delete a vault inside the app; that destroys its key, so nothing in it can ever be opened again. Backup files made before that still contain the vault – delete them too, in Backup settings (for the app's own backups) or wherever you copied them. Uninstalling the app removes its private storage but not the Download/DigiVault folder. There is no server-side copy to request deletion of.

Children

DigiVault is not directed at children and does not knowingly collect information from anyone, of any age.

Changes

If this policy changes, the new version will be published at this address with a new effective date.

Contact

Questions about this policy: dudhaiya@gmail.com