Privacy Policy for Nebula Vault

Last Updated: December 29, 2025

1. Overview

Nebula Vault is designed as an offline-first security tool. We believe your data belongs to you. We do not collect, store, share, or sell your personal data. All sensitive data (passwords, keys) is encrypted and stored locally on your device.

2. Information We Collect

We intentionally collect no personal information within the application itself.

2.1. Local Data (Your Vault)

• Passwords & Secrets: Any passwords, codes, or notes you save are stored only on your device.

• Encryption: This data is encrypted using industry-standard AES encryption protected by your local session keys. We (the developers) cannot access or decrypt your vault.

• Biometric Data: We use Android's Biometric API (Fingerprint/PIN) for authentication. This process happens entirely on your device's secure hardware. We never access, collect, or store your actual biometric measurements.

2.2. Usage Data

• We do not use third-party analytics services (like Firebase or Google Analytics) to track your app usage.

3. Permissions

The App requires the following permissions to function:

• Biometric Hardware (USE_BIOMETRIC): To authenticate your identity securely before unlocking the vault.

4. Data Safety & Security

We employ rigorous security measures to protect your local data:

• Zero-Knowledge Architecture: Your password/keys are never transmitted to us.

• Strong Encryption: We use AES-256-GCM (Advanced Encryption Standard in Galois/Counter Mode) for authenticated encryption and PBKDF2 (with HMAC-SHA256) for key derivation. This ensures your data is both confidential and secured. 

• Secure Storage: Data is stored in your device's protected internal storage.

5. Children’s Privacy

Our App does not knowingly collect personally identifiable information from children under 13 (or applicable age). Since we do not collect personal data, the App is safe for general audiences.

6. Your Rights (GDPR & CCPA)

Since we do not collect or control your personal data, many provisions regarding "data access" or "erasure" requests to us are not applicable as we hold no data to erase.

• Access & Deletion: You have full control. You can delete all your data locally by clearing the App's storage or uninstalling the App.

• No Sale of Data: Since we do not access, collect, or possess your personal data, it is structurally impossible for us to sell it to third parties. 

7. Data Retention

Your encrypted data remains on your device as long as the App is installed. If you uninstall the App, all local data (vault) is permanently deleted by the Android operating system.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Developer: Akhil Email: akhilrajdeveloper009@gmail.com