CardVault Privacy Policy

Effective date: 2026-08-27

In short: this app collects, uploads and shares no data whatsoever.

CardVault ("the app") takes your privacy seriously. This policy explains how the app handles your information.

1. We collect no personal information

The app has no server and requires no account or login. Everything you add in the app (photos, names, categories, etc.) is stored locally on your device only and is never uploaded to us or any third party.

2. Camera and photo permissions

The app requests camera and photo library access solely so you can capture or pick photos of your cards and documents and save them to your local vault. These photos never leave your device.

3. Biometrics

The app can use system-provided Face ID / fingerprint to unlock the vault. Biometric data is managed entirely by the operating system; the app cannot read or access it.

4. Data storage and security

All data is stored locally on your device. You can delete any item from within the app at any time, and uninstalling the app deletes all local data.

You may export a backup yourself. The backup is encrypted with a passphrase you choose before it is written anywhere, and that passphrase is never stored or transmitted. You choose where the file is saved โ€” device storage or any cloud provider you pick. You are responsible for keeping both the file and the passphrase safe: if the passphrase is lost, the backup cannot be recovered.

5. Purchases

The app is free to use for a limited number of stored items. An optional one-time purchase removes that limit. The purchase is processed entirely by the app store you installed from (Google Play or the Apple App Store) โ€” the app never sees or stores your payment details, and none of your vault contents are involved in the transaction. The store's own handling of that payment is covered by its terms and privacy policy.

6. Crash reports

If the app crashes, it writes a log to your device containing only the error stack trace and basic device information (model, OS version). This log stays on your device and is never sent anywhere automatically. It is shared only if you explicitly choose to send it, and only to the destination you pick. Your vault contents are never included, and you can delete the log from within the app.

7. Third parties

The app contains no ads and no third-party analytics or tracking SDKs. Your vault contents are never shared with anyone. The only third party involved is the app store that processes the optional purchase described in section 5.

8. Children's privacy

The app collects no information from children (because it collects no information at all).

9. Changes to this policy

If this policy changes, we will update this page and the effective date above.

10. Contact

Questions? Contact: service@hookatech.com