Privacy Policy for DueVault Last updated: June 2026

DueVault ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile application handles information when you use the service as a universal tracker for bills, documents, and subscriptions.

1. Information Collection and Use

• Local Storage: By default, DueVault operates as a local-first application. All data, financial records, bill amounts, and document metadata are stored directly on your device using a secure, client-side encrypted database.

• Attachments and Photos: Images captured via camera or imported from your gallery for document tracking are stored locally in your app's private directory. These files are encrypted in-place using advanced cryptographic standards.

• Account Data: If you choose to log in using a Google Account (optional PRO feature), we only collect basic profile information (such as your email address and name) required to facilitate cloud synchronization and authentication.

2. Third-Party Services and Data Transfers To provide premium features, DueVault integrates with the following trusted third-party providers:

• Google Cloud / Firebase & Firestore: Used strictly for real-time secure cloud synchronization for authorized premium users.

• Google Drive API: Used exclusively to back up your encrypted vault database and attachments to your personal Google Drive storage space. We do not have access to your private Drive files.

• RevenueCat: Used to manage in-app purchases, subscriptions, and entitlement verification. No sensitive document data is shared with RevenueCat.

• Google ML Kit (Text Recognition): Used on-device for the Smart Scan (OCR) feature to parse text from bills. Your images are processed locally on your hardware and are never uploaded to remote servers for text extraction.

3. Data Deletion You retain absolute control over your data. You can completely wipe all local data, cached files, and attachments at any time using the "Wipe All Data" feature within the application settings. For premium users, this will also trigger the removal of associated sync records.

4. Changes to This Policy We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes.

5. Contact Us For any questions regarding this privacy policy, you can contact us via email.

Account and Data Deletion Request

In compliance with Google Play User Data policies, DueVault provides a simple way for users to request the deletion of their accounts and all associated data.

How to request deletion: To delete your account, encrypted vault settings, and cloud backup references, please send an email from your registered Google account to:cristi1595@gmail.com with the subject line "Delete My DueVault Account".

What data will be deleted: Upon receiving your request, we will permanently delete your authentication record from Firebase and wipe any encryption sync tokens. (Note: Since DueVault uses a local-first architecture, your physical database and attachments reside on your device and are wiped when you uninstall the app).

Data Retention: We do not retain any user personal data or backup files once the deletion request is processed. Processing takes up to 7 business days.