Privacy Policy for Vaultrix: Photo & Video Locker
Effective Date: August 2, 2026
Developer: Naeem Abbas (GenzTech Apps)
Contact: naeem.abbas20201@gmail.com
1. Introduction
Vaultrix: Photo & Video Locker ("Vaultrix", "we", "our", "the app") is a privacy-focused, offline secure vault that lets you hide and encrypt photos, videos, documents, and notes behind a PIN or fingerprint. This Privacy Policy explains how the app handles your information.
Vaultrix is designed to be local-first and private by default: your files never leave your device, there are no user accounts, and there is no cloud server. By using Vaultrix, you agree to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
All of the following is created and stored only on your device:
Your PIN / passcode — used to unlock the vault and to derive the encryption key. It is never transmitted off the device and cannot be recovered by us.
Photos, videos, and documents you choose to import into the vault.
Notes you write inside the app.
Albums you create to organize media.
Decoy PIN and disguise settings (e.g., calculator/clock/weather icon).
Web addresses you type into the in-app private browser.
We do not ask for your name, email, phone number, date of birth, or any account registration.
2.2 Information Collected Automatically
Break-in (intruder) selfies — If someone enters the wrong PIN multiple times and you have enabled Break-in Alerts, the front camera silently captures a photo. This photo is stored only in the app's private storage on your device and is never uploaded.
Advertising identifier — The app displays ads through Google AdMob, which may access your device's advertising ID and limited device information to serve and measure ads. See Section 5.
Crash reports — If the app crashes or hits an error, Google Firebase Crashlytics sends us a diagnostic report containing the stack trace, your device model and manufacturer, Android version, app version, and a randomly generated identifier for your installation. See Section 5.1.
Anonymous usage events — Google Firebase Analytics records which screens are opened and which features are used (for example: "vault unlocked", "files imported", "note saved", "setting changed"), so we can tell which parts of the app people rely on. See Section 5.1.
Critically, neither crash reports nor usage events ever include your vault content. We never send your PIN, file names, file contents, photos, videos, note text, album names, browsing history, or intruder selfies. Counts of items are reported only as ranges (for example "6–20 files"), never as exact figures. The app does not collect your location beyond the approximate, IP-based region AdMob infers for ad serving.
Crash reporting and analytics are disabled entirely in development builds and run only in the version published on Google Play.
2.3 Information from Third-Party Services
None. Vaultrix has no third-party sign-in (no Google Sign-In, Facebook, etc.) and creates no online account.
3. How We Use Your Information
We use the information solely to:
Encrypt, store, and display the files, notes, and albums you add to the vault.
Unlock the vault using your PIN or biometric authentication.
Capture and show you break-in selfies when Break-in Alerts are enabled.
Load websites you request in the in-app private browser.
Display advertisements to support the free app (via Google AdMob).
Show you a video or full-screen ad to unlock certain actions (such as viewing a captured intruder photo or exporting files).
Diagnose crashes and errors so we can fix them (via Firebase Crashlytics).
Understand which features are used, so we can improve the app (via Firebase Analytics).
4. Data Storage and Security
4.1 Local Storage Only
All vault content (photos, videos, documents, notes) is stored on your device and encrypted using AES-256-GCM, with the encryption key derived from your PIN.
Settings and preferences are stored locally on the device.
Intruder selfies are stored in the app's private internal storage.
There is no cloud backup or server. If you uninstall the app or clear its data, your vault content is permanently deleted and cannot be recovered.
4.2 Security Measures
Strong on-device encryption (AES-256-GCM) for stored files.
Optional biometric (fingerprint/face) unlock via the Android BiometricPrompt API.
Optional decoy vault and app-icon disguise for added discretion.
Because encryption is tied to your PIN, there is no password recovery — please remember your PIN.
5. Advertising (Google AdMob)
Vaultrix is free and supported by ads served through Google AdMob. AdMob may collect and process device identifiers (including the advertising ID), coarse/approximate location inferred from IP, and ad-interaction data to serve and measure ads.
You can opt out of personalized ads at any time: Settings → Google → Ads on your device (reset or delete advertising ID).
AdMob's handling of this data is governed by Google's Privacy Policy: https://policies.google.com/privacy and https://policies.google.com/technologies/ads
Service Purpose Data Accessed Privacy Policy
Google AdMob Display advertising Advertising ID, device info, ad interactions, approximate (IP-based) location Google Privacy Policy
Firebase Crashlytics Crash and error diagnostics Stack traces, device model, OS and app version, random install identifier Google Privacy Policy
Firebase Analytics Anonymous feature-usage statistics Screen names, predefined feature events, device and country info, advertising ID Google Privacy Policy
We do not sell, trade, or rent your personal information, and we do not use your vault files, notes, or intruder photos for advertising.
5.1 Crash Reporting and Analytics (Google Firebase)
To keep the app stable and to learn which features matter, Vaultrix uses two Google Firebase services:
Firebase Crashlytics collects a report when the app crashes or logs an error: the stack trace, your device model and manufacturer, Android version, app version, and a random identifier generated on your device at install time. That identifier is not your advertising ID or any hardware serial number; it lets us tell "one person hit this crash 50 times" apart from "50 people hit it once", and it is destroyed when you uninstall the app.
Firebase Analytics records a small, fixed list of events describing what kind of action happened — such as a vault unlock, a file import, a note save, or a settings change — together with the screen names you visit.
By design, the app has no mechanism to send us your vault contents: the code that reports events accepts only fixed, predefined values, never text you typed or file names from your device. Item counts are grouped into ranges rather than exact numbers so that the amount of content in your vault is not disclosed either.
Both services are switched off completely in development builds, and neither is used for advertising or profiling. Firebase's handling of this data is governed by Google's Privacy Policy: https://policies.google.com/privacy
6. Camera and Photos
Camera access is used for one purpose only: capturing a break-in selfie when wrong PINs are entered (Break-in Alerts). These photos stay on your device.
Photos and videos are accessed only when you explicitly choose to import them into the vault, using the Android photo picker or media permission.
Imported media and intruder photos are stored in the app's private storage, encrypted, and are never shared with third parties or used for advertising.
You can delete any photo, video, or intruder selfie at any time from within the app.
7. In-App Private Browser
Vaultrix includes a private web browser. Websites you visit are loaded directly in the app's WebView and are subject to the privacy practices of those third-party websites. We do not collect, transmit, or store your browsing history on any server; any local browsing data stays within the app on your device.
8. Children's Privacy
Vaultrix is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Because the app stores no personal data on any server, no such information is collected by us.
9. Your Rights and Choices
View and control your data: All your content lives in the app and can be viewed, edited, or deleted by you at any time.
Export: You can export files from the vault back to your device storage.
Delete everything: Deleting items in the app, clearing the app's data, or uninstalling the app permanently removes all locally stored data, including encrypted files and intruder photos.
Notifications: You can disable break-in alert notifications in the app's Settings or in Android Settings.
Ad preferences: Opt out of personalized ads via device settings (Settings → Google → Ads).
10. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have rights to access, rectify, erase, restrict, and port your data, and to object to processing. Because Vaultrix stores your content only on your device and operates no server, you exercise most of these rights directly within the app (view, edit, export, delete).
For advertising, Google AdMob processes device identifiers as described in Section 5; you can control personalization through your device settings. Crash diagnostics and anonymous usage statistics are processed by Firebase on the basis of our legitimate interest in keeping the app stable and improving it, as described in Section 5.1; because those records are tied only to a random install identifier, contact us at the email below if you want them erased and we will remove the reports we can identify. For any questions about your rights, contact us at the email below.
11. Data Retention
On-device data (files, notes, albums, intruder photos, settings) is retained until you delete it, clear the app's data, or uninstall the app.
Advertising data processed by Google AdMob is retained according to Google's own retention policies.
Crash reports are retained by Firebase Crashlytics for up to 90 days; anonymous analytics events are retained by Firebase Analytics for up to 14 months. Both are governed by Google's retention policies.
We operate no server of our own, so apart from the diagnostic and usage data held in Firebase we retain nothing about you.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be reflected by updating the "Effective Date" above and posting the revised policy at its published URL. Continued use of the app after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Email: naeem.abbas20201@gmail.com
Developer: Naeem Abbas (GenzTech Apps)