DigiVault – Privacy Policy

Effective 3 September 2026 · Applies to the DigiVault Android app (package com.dudhaiya.digivault)

DigiVault is a private, encrypted vault for photos, videos and documents. It is built so that your files stay on your phone. This page explains, plainly, what the app does with your data and what it does not.

The short version

There is no account. You never give us a name, email, phone number or password.
Your photos, videos and documents are encrypted and stored only on your phone. We do not have a copy. We could not read one if we did.
The app has no analytics, no advertising, no crash reporting and no tracking of any kind.
When you choose to share or sync a vault, the content travels end-to-end encrypted between phones and is not stored on any server.

What is stored on your phone

Everything you put in a vault is encrypted with AES-256-GCM using a key derived from your vault password (PBKDF2-HMAC-SHA256, 120,000 iterations). The password itself is never stored. Your vault database, thumbnails and media files exist only inside the app's private storage on your device. If you forget your password and do not have your recovery key, the contents cannot be recovered – by you or by anyone else.

Photos you import keep the information already inside them, including any location tag the camera added. That information is encrypted along with the photo and is never read or sent by the app.

Sharing and sync

You can share a vault by link, or keep a vault in sync with another person's phone. In both cases:

Content is encrypted on your phone before it leaves, with a key that only the two phones hold. The key for a share link travels only inside the link itself, in a part of the address that is never sent to any server.
The connection passes through a relay we operate on Cloudflare Workers. The relay forwards encrypted bytes between two live connections and stores nothing – not files, not thumbnails, not names, not lists. It has no database and no file storage of any kind. When either phone disconnects, the bytes are gone from it.
The relay cannot decrypt anything. Neither can we.
Like any internet service, Cloudflare's infrastructure can see the IP addresses that connect and when. That is the ordinary metadata of an internet connection, not your content.

Sharing and sync only happen when you start them. If you never share, the app never connects to anything.

Permissions, and why each one exists

Permission	Why the app asks for it
Photos and videos	To show your gallery so you can choose what to import into a vault, including whole albums. Nothing is read until you pick it.
Media location	So an imported photo keeps its original location tag inside the vault, exactly as the camera saved it. It is encrypted with the photo and never sent anywhere.
Camera	Only to scan the pairing code shown on the other person's screen when you set up sync. No image is saved.
Internet and network state	For share links and sync, and to reconnect promptly when your network comes back. Nothing is sent unless you share or sync.
Foreground service and notifications	To keep a share link streaming while your screen is off. The notification shows only that the app is open – never a count, a name or any content.
Wake lock	To keep the screen on while a sync is running so a transfer is not cut off.
Receive boot completed	Declared by the foreground-service library the app uses. DigiVault does not start itself at boot and cannot: a vault only opens when you type its password.

Backups and recovery keys

You can export an encrypted backup of a vault to a location you choose. The backup is encrypted exactly like the vault and can only be opened with that vault's password or recovery key. Recovery keys are shown to you once and are never stored in readable form.

Payments

Purchases are handled by Google Play. The app never sees or stores your card or payment details.

Data we collect

None. The app does not transmit any information about you or your device to us. There is nothing for us to sell, share or lose.

Deleting your data

Delete a vault inside the app, or uninstall the app. Because nothing is stored anywhere else, that is the whole process. There is no server-side copy to request deletion of.

Children

DigiVault is not directed at children and does not knowingly collect information from anyone, of any age.

Changes

If this policy changes, the new version will be published at this address with a new effective date.

Contact

Questions about this policy: dudhaiya@gmail.com