ZenoVault Privacy Policy 

Effective Date: May 23, 2026

Introduction Welcome to ZenoVault, an enterprise-grade secure vault application developed by Kshatryx Technologies. We are deeply committed to protecting your privacy, ensuring the highest level of security, and maintaining complete Data Sovereignty (Data Samprabhuta). This Privacy Policy explains how we handle your data when you use the ZenoVault application.

The "Zero-Knowledge" Promise ZenoVault is built on a strict "Zero-Knowledge" architecture. This means:

• Client-Side Encryption: All your sensitive data (passwords, notes, and nominee details) is encrypted directly on your device using military-grade AES-256 encryption before it is synced to the cloud.

• We Cannot Read Your Data: Kshatryx Technologies, its founders, and our cloud providers cannot access, read, or decrypt your vault items.

• Master Password: Your Master Password is the sole key to your vault. It is never transmitted to our servers or stored anywhere outside your device. If you lose it, we cannot recover your data.

Data We Collect and How We Use It To provide our advanced security services, we process the minimum necessary data:

• Account Information: We collect your email address solely for account creation and authentication.

• Encrypted Vault & Nominee Data: We store the encrypted ciphertext of your vault items and digital inheritance (Zeno-Nominee) setup to allow secure cross-device syncing. This data is entirely unreadable to us.

• Device & Session Information: To provide our 'Active Devices & Remote Wipe' security feature, we temporarily log your device OS, model, and IP address. This allows you to monitor active sessions and remotely wipe your vault from stolen or lost devices.

• Device Permissions (Biometrics): If you enable Fingerprint or Face Unlock, the biometric authentication is processed entirely locally by your device's native hardware. We do not collect, store, or transmit your biometric data.

Dark Web Breach Monitor To calculate your Security Hygiene score, our app securely checks your email address against public data breach databases. This is done via a secure, anonymous API request. We do not track, log, or store your breach search history.

Data Sovereignty & Third-Party Services We prioritize your data's sovereignty. Unlike platforms that export data globally, ZenoVault utilizes robust self-hosted infrastructure (powered by Appwrite) ensuring your encrypted data remains secure and strictly within Indian borders.

Data Deletion and Your Rights You have absolute control over your digital identity. You can completely delete your account and all associated encrypted data permanently at any time by navigating to Settings > Delete My Account & All Data within the app. Upon confirmation, your active sessions are revoked, and your data is instantly and permanently wiped from our servers.

Changes to This Policy We may update this Privacy Policy from time to time as we add new security features. Any changes will be reflected within the app and on this page.

Contact Us If you have any questions or concerns regarding this Privacy Policy or your data security, please contact us directly at: Email: support@kshatr.com Developer: Kshatryx Technologies