Vylt

Privacy Policy

Effective Date: March 13, 2026

App Name: Vylt

Developer/Provider: IV Digital

This Privacy Policy explains how information is handled when you use Vylt. If you do not agree with this Policy, do not use the App.

1. Privacy Philosophy (The Zero-Knowledge Standard)

Vylt is designed as a local-only, offline-first, zero-knowledge application. Our architecture is built to ensure that your data remains yours alone.

This means:

No Accounts: We do not require or support user accounts.
No Servers: We do not operate servers to store, sync, or transmit your files.
No Access: We have no technical ability to access your encrypted files, thumbnails, or keys.
Architecture-First: Your privacy is protected by the app's fundamental design, not just policy promises.

2. Information We Do NOT Collect

Vylt does not collect, transmit, or store the following on any external server:

Your files, photos, videos, or documents
Encryption keys, PINs, or recovery passphrases
Notes or passwords stored within the app
Personal identifiers (name, address, phone number)
Location data or browsing history

3. Information Stored Locally on Your Device

To function, Vylt stores the following data only on your device's internal storage:

Encrypted Content: All files, notes, and passwords are encrypted using hardware-backed AES-256-GCM.
Security Keys: Encryption keys are managed by the hardware-backed Android Keystore.
App Configuration: This includes your theme preferences, security toggles (e.g., biometric unlock), and storage settings.
Isolation: If you utilize the optional Decoy Vault, that data is stored in a separate, isolated local directory.

4. User-Initiated Backups and Sharing

Vylt provides tools for you to manage your data, but these are 100% user-controlled:

Manual Backups: Encrypted backups (.vaultbackup) are created only when you initiate them. You choose the destination (e.g., your SD card or a personal cloud drive). We never receive these files or your backup passphrases.
Secure Sharing: When you create a Secure Share package (.vss or .vaultfile), the app generates an encrypted container. Transmission of this file is handled by third-party apps you select (Email, Messenger, etc.). Vylt does not track who you share with or what you share.

5. Network Activity and Third-Party Services

Vylt is designed to function entirely offline. However, it interacts with the following system-level services:

Google Play Billing: In-app purchases for Vylt Pro are processed by Google. Transaction data is governed by Google's Privacy Policy.
Google Play Services: The QR scanner used for public-key exchange utilizes ML Kit, which may be updated via Google Play Services.
No Analytics: Vylt does not include third-party tracking or behavioral analytics SDKs.

6. Support Communications

If you choose to use the "Contact Support" feature:

An email template is created on your device.
Basic technical metadata (App version, Android version, Device model) is pre-filled to help us troubleshoot.
This data is only sent to us if you explicitly tap "Send" in your email app.

7. Legal Compliance and Law Enforcement

Because Vylt is a zero-knowledge app, we do not possess your data. We cannot comply with requests to provide, decrypt, or retrieve your files because we do not have the keys and the files never leave your device. We can only provide information we actually possess, such as basic support emails you have sent to us.

8. Data Retention and Security

Retention: We do not retain user data because we do not collect it. Your data remains on your device until you delete it or uninstall the app.
Responsibility: Device security is your responsibility. Use of the app on rooted or compromised devices may weaken the protections provided by Vylt.

9. Changes to This Policy

We may update this Privacy Policy to reflect app updates. Material changes will be notified in-app. Continued use of Vylt after the "Effective Date" constitutes acceptance of the new terms.

10. Contact

For questions regarding this policy or your privacy, please contact:
Email: support@ivdigital.co