{
  "$schema": "https://appvau.lt/api/v1/openapi.json",
  "dataset": "privacy",
  "title": "App-Vault data flows and processors",
  "description": "What the App-Vault iOS app sends off the device, which processors receive it, what each one never receives, and the App Store privacy label as declared.",
  "updated": "2026-09-11",
  "source": "https://appvau.lt",
  "documentation": "https://appvau.lt/privacy/",
  "publisher": "Vast Flow, LLP",
  "licence": {
    "name": "CC BY 4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/",
    "attribution": "App-Vault (https://appvau.lt)",
    "terms": "Free to reuse, republish and build on, including commercially, with attribution and a link to the source page."
  },
  "caveats": [
    "The publisher’s own declaration. It can be checked: install the app, put the device in Airplane Mode and every vault function still works.",
    "Microsoft Clarity is on the website only. It is listed here because a reader auditing the brand will find it and should know which surface it belongs to.",
    "“Not linked to you” is Apple’s privacy-label term and means the collector holds no identity to link it to — there is no account system here — not that the identifier is absent."
  ],
  "summary": {
    "vault_content_leaves_device": false,
    "account_required": false,
    "publisher_can_decrypt": false,
    "server_holding_user_files": false,
    "works_offline": true,
    "offline_note": "Every vault function — unlock, import, decrypt, shred, change pattern — works in Airplane Mode. The only thing a network connection adds is the outbound telemetry above and the optional iCloud backup.",
    "att_prompt_shown": false,
    "ad_sdks": []
  },
  "processors": [
    {
      "name": "Google Firebase Analytics",
      "scope": "app",
      "purpose": "Anonymous, content-free funnel events (onboarding step, paywall view, feature toggle).",
      "receives": [
        "Identifier for Vendors (IDFV)",
        "iOS version",
        "device model",
        "app version",
        "country from IP",
        "language"
      ],
      "never_receives": [
        "vault contents",
        "file names",
        "file counts",
        "the unlock pattern",
        "the recovery phrase"
      ],
      "linked_to_identity": false,
      "privacy_policy": "https://firebase.google.com/support/privacy"
    },
    {
      "name": "Google Firebase Crashlytics",
      "scope": "app",
      "purpose": "Crash and stability diagnostics.",
      "receives": [
        "stack trace",
        "iOS version",
        "device model",
        "app version",
        "anonymous installation UUID",
        "recent UI breadcrumbs"
      ],
      "never_receives": [
        "vault contents",
        "file names",
        "the unlock pattern",
        "the recovery phrase"
      ],
      "linked_to_identity": false,
      "privacy_policy": "https://firebase.google.com/support/privacy"
    },
    {
      "name": "RevenueCat",
      "scope": "app",
      "purpose": "Subscription state and receipt validation for the in-app purchase.",
      "receives": [
        "an anonymous, app-generated subscriber identifier",
        "the App Store receipt"
      ],
      "never_receives": [
        "name",
        "email address",
        "payment card details",
        "vault contents"
      ],
      "linked_to_identity": false,
      "privacy_policy": "https://www.revenuecat.com/privacy"
    },
    {
      "name": "Microsoft Clarity",
      "scope": "website",
      "purpose": "Anonymous session replay on the website appvau.lt. Not present in the app.",
      "receives": [
        "website page views",
        "anonymised interaction events"
      ],
      "never_receives": [
        "anything from inside the app"
      ],
      "linked_to_identity": false,
      "privacy_policy": "https://privacy.microsoft.com/privacystatement"
    }
  ],
  "app_store_privacy_labels": [
    {
      "category": "Diagnostics — Crash Data, Performance Data",
      "collected": true,
      "linked_to_user": false,
      "used_for_tracking": false
    },
    {
      "category": "Usage Data — Product Interaction",
      "collected": true,
      "linked_to_user": false,
      "used_for_tracking": false
    },
    {
      "category": "Identifiers — Device ID (IDFV)",
      "collected": true,
      "linked_to_user": false,
      "used_for_tracking": false
    },
    {
      "category": "Photos or Videos",
      "collected": false,
      "linked_to_user": false,
      "used_for_tracking": false
    },
    {
      "category": "Contact Info",
      "collected": false,
      "linked_to_user": false,
      "used_for_tracking": false
    },
    {
      "category": "Location",
      "collected": false,
      "linked_to_user": false,
      "used_for_tracking": false
    }
  ],
  "full_policy": "https://appvau.lt/privacy/"
}