PRIVACY POLICY — NOTIFVAULT
Last updated: 4th September 2026
NotifVault ("the app," "we," "our") is developed and maintained by an independent developer operating as XUV. This policy explains what data NotifVault accesses, how it is stored, and what is — and is not — done with it.
1. WHAT WE ACCESS
With your explicit, informed permission, NotifVault uses Android's Notification Listener API to read the content of notifications posted by other apps on your device. This can include message previews, sender names, verification codes, and other notification content. NotifVault only begins reading notifications after you grant Notification Access in Android Settings, and the app shows you what this permission means before you're directed there.
2. WHERE YOUR DATA GOES
Nowhere but your device. NotifVault stores captured notifications locally, encrypted with AES-256 via SQLCipher, with keys held in the Android Keystore. There is no user account, no cloud backup, no remote server, and no sync feature. We do not have access to your notification history — it cannot reach us, because it never leaves your phone.
3. WHAT WE DO NOT COLLECT
We do not collect, transmit, or have access to your notification content, contacts, messages, or usage history. We do not sell or share notification data with any third party, because we never receive it ourselves.
4. ADVERTISING
The free version of NotifVault displays ads served by Google AdMob. AdMob may collect device identifiers and usage data as described in Google's own privacy policy, for the purpose of showing and measuring ads. This is unrelated to your notification content, which AdMob never receives. NotifVault Pro removes ads and, with them, AdMob's data collection.
5. DATA RETENTION AND DELETION
You control retention length via the app's settings (7 to 365 days, or indefinitely), and you can delete individual entries or your entire history at any time. Uninstalling NotifVault deletes the encrypted local database along with the app.
6. PERMISSIONS
- Notification Access: required for the app's core function. Optional, and revocable at any time in Android Settings.
- Biometric / device credential: used only to unlock the app if App Lock is enabled. Used for no other purpose.
- Notifications: used to deliver reminders you create and the optional weekly digest.
7. CHILDREN'S PRIVACY
NotifVault is not directed at children and is not designed to collect data from anyone, regardless of age, beyond what is described above.
8. CHANGES TO THIS POLICY
Updates will be posted here with a new "last updated" date. Continued use of the app after a change constitutes acceptance of the revised policy.
9. CONTACT
notif_vault@outlook.com