Privacy Policy
The short version: we collect nothing. No servers, no accounts, no analytics. Everything you store stays encrypted on your device, in your hands.
Effective date
This policy is effective as of 2026. It applies to the OmniVault mobile app and this website. We will update the date here whenever the policy changes.
Data we collect
None. OmniVault has no servers, no user accounts, and the app requests no network permission at all. There is no backend for your data to travel to, so nothing you store in OmniVault ever reaches us — because there is no “us” to reach. We cannot see your vaults, your files, your passwords, or even know that you use the app.
On your device only
Every vault, note, password, and file you add to OmniVault is encrypted and stored locally on your device. Your master password and biometric unlock never leave the device. Because we hold no keys and run no servers, your data cannot be exported, intercepted, or handed over by us — we simply do not have it.
Permissions we request
OmniVault asks for a small set of device permissions, and only to power features you choose to use. Each one is optional, used locally, and never sent anywhere.
- Camera — used only to photograph an intruder after a failed unlock attempt, if you turn that feature on. The photo is stored encrypted on your device.
- Location — used only to tag where an intruder event happened, so a captured photo carries a place alongside it. It is never tracked in the background or shared.
- Biometric (fingerprint / face) — used only to let you unlock your vault quickly. Biometric data stays in your device’s secure hardware and is never read by us.
- Storage / Media — used only for media you explicitly choose to import into a vault or export out of it. We do not scan or index your gallery.
You can deny any of these permissions and keep using OmniVault. The related feature simply stays off.
Optional Google Drive backup
OmniVault works fully offline and needs no cloud. If you choose to turn on backup, an encrypted archive of your vault is stored in your own Google Drive, under your own Google account. The archive is encrypted before it leaves your device, so its contents are unreadable to anyone but you. We never see it, never receive a copy, and have no access to your Drive. You control the backup entirely — create it, restore it, or delete it whenever you want.
No analytics, ads, or third parties
OmniVault contains no analytics SDKs, no crash trackers that profile you, no advertising, and no advertising identifiers. We do not build profiles, we do not sell or share data, and there is no third party receiving information about you. Not now, not ever.
Children
OmniVault is a general-purpose security tool and is not directed at children. We do not knowingly collect any information from anyone — including children — because we do not collect information at all.
Changes to this policy
If we ever change how OmniVault handles data, we will update this page and revise the effective date above. Because the app stays offline with no accounts, we have no way to email you — so we recommend checking this page after a major update.
Contact
Questions about privacy? Reach us at support@omnivault.pro or through our support page. We are happy to explain anything in plain language.