Card Vault: Secure Card Wallet

This Privacy Policy explains how Card Vault ("we," "us," or "our") handles your information. Card Vault is designed as a privacy-first, fully offline application. We do not collect, store, sell, or share your personal data.

1. Data Collection and Storage

Card Vault operates 100% offline. All data you enter into the app including credit card numbers, expiry dates, CVVs, and banking information is encrypted using AES-256 and stored locally on your device. We do not operate any servers, and we do not have access to your data, master password, or PIN.

2. Device Permissions and Features

To provide its core functionality, Card Vault requests the following local permissions. None of the data processed by these features ever leaves your device:

• Camera: Used exclusively for the built-in card scanning feature. Optical character recognition (OCR) is performed locally on your device. Photos of your cards are never saved to your gallery, uploaded to the internet, or shared with third parties.

• Biometrics (Face/Fingerprint): Used to unlock the app via your device’s system-level biometric API. We do not have access to your biometric data; the app only receives a "success" or "fail" signal from your device's operating system.

• Clipboard: When you copy a card number from the app, it is temporarily stored in your device's clipboard. The app is programmed to automatically clear this data after use to prevent unauthorized access by other applications.

3. Google Drive Backups and Google API Services

Card Vault offers an optional backup feature utilizing Google Drive. If you choose to enable this feature:

• The app will request permission to access a specific, isolated folder within your Google Drive account.

• All backup files are encrypted locally on your device using PBKDF2 key protection before being uploaded to Google Drive.

• Google API Disclosure: Card Vault's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Drive data for any purpose other than facilitating your encrypted backups.

4. Third-Party Tracking and Analytics

Card Vault contains absolutely zero tracking software, analytics SDKs, or advertising frameworks. We do not monitor how you use the app, and there are no ads.

5. Data Retention and Deletion

Because your data is stored exclusively on your device (and in your personal Google Drive, if enabled), you maintain complete control over it. You can delete your data at any time by deleting the backup files from your Google Drive and uninstalling the application from your device.

6. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

7. Contact Us

If you have any questions or suggestions about this Privacy Policy, please contact us at: iammonsterdroid@gmail.com