Privacy policy

Files stay on your device

Imported files, filenames, previews and file content are not uploaded to CipherVault. The app saves encrypted files and a recovery file (box.recovery) on your device. Restoring or exporting a file creates an unencrypted copy at its original location or a location set by the app. Opening a file with another app creates a temporary unencrypted copy for that app, which may keep its own copy. These copies are no longer protected by the vault.

Accounts and device information

To provide account and recovery features, we process your account ID, email or Google sign-in identity, verification status, device identifiers and identifiers for device registration records in the app, vault names, device display names, backup status and sync times. Email account passwords are stored as hashes, not as readable passwords. Google sign-in and email/password sign-in can belong to different accounts even when the email is the same; they are not merged automatically.

Recovery code backup

The app first encrypts a recovery code on your device using Android's secure key storage. When you are signed in, the vault is linked to your account and an internet connection is available, the app uploads the code through an authenticated connection. Vaults created before sign-in require your confirmation before linking and upload. Only after the server confirms that the code was saved does the app remove the encrypted local recovery-code copy used for uploading. Check in the app that backup is complete before clearing app data or uninstalling.

Recovery codes are stored encrypted in our database. After you verify your identity again, an authorized server request can decrypt your own code and return it to you. The service can therefore access recovery codes through this process. Protect your account and any code you copy. CipherVault does not store the original encrypted files needed for recovery. Account backup saves recovery codes, not your files.

Purchases and rewards

We retain purchase identifiers, product and subscription status, paid periods, refunds and access records to deliver membership, avoid granting the same purchase twice and resolve payment disputes. Payment providers process payment details; CipherVault does not receive full payment card details. Optional rewarded advertising in the app may involve Google AdMob and reward verification identifiers.

Website payments

Paddle handles website checkout, subscription billing, invoices and the billing management page. Its payment flow may process contact, tax, fraud-prevention and payment information under Paddle’s own policies. The Paddle script is loaded when you choose to open checkout; recovery information is not sent to Paddle by CipherVault.

Sign-in and service providers

We use sign-in status and security information such as network addresses, times and request IDs to prevent abuse and operate the service. Email delivery and identity verification involve their respective providers. The website uses essential session and security cookies; recovery codes are not saved to browser storage. Google sign-in loads Google’s identity service when you choose it.

Retention and deletion

Deleting your account immediately ends access to its recovery records. The encrypted recovery codes and the Premium file decryption information held for your account are scheduled for removal after 30 days. Recovery-code access logs older than 90 days are periodically removed. Other account and sign-in information, including email, password hashes or Google identity hashes, device records and device registration records in the app, and vault information remain stored; there is currently no automatic deletion process for them. Some transaction, fraud-prevention and audit records may also remain for operational or legal obligations. This describes current technical behavior; it does not set new retention periods or legal grounds for the remaining records. Those policies still need separate operational and legal confirmation. Deleting your account does not delete encrypted files on your device or cancel subscriptions with a payment provider.

Unlinking a device keeps recovery information in the original account. Clearing app data, uninstalling or losing a device before backup is complete can lose the recovery code waiting for upload. Keep a separate copy of your encrypted files and each vault's recovery file (box.recovery).

Your choices and contact

You can review account information, manage device associations and request account deletion. Use the support email in the app settings or the contact published on the CipherVault website for access, correction, deletion or privacy questions. Do not send passwords, recovery codes or private files in support messages. Updated policies are identified by their effective date.