Privacy Policy

Effective: April 7, 2026

The Short Version

MiVaulty collects no data. We have no servers. We have no analytics. Your notes never leave your device — period.

What We Don't Collect

MiVaulty is designed from the ground up to know nothing about you. The app has zero network entitlements — it is technically incapable of transmitting data.

🚫 No Personal Data No name, email, or account

📡 No Network Access Zero outbound connections

📊 No Analytics No tracking, no telemetry

☁️ No Cloud Sync Nothing leaves your iPhone

No Accounts No Ads No Third-Party SDKs No Cookies No Crash Reporting No Firebase No Facebook SDK

Data Storage

All your notes, images, tags, and settings are stored locally on your device using Apple's SwiftData framework. Every note is encrypted with AES-256-GCM before it touches the filesystem.

Encryption keys are stored in the iOS Keychain, protected by the Secure Enclave
Notes are excluded from iCloud backup by default
Decrypted content exists only in memory while you're actively viewing it
When the app goes to the background, all plaintext is wiped from memory

Biometric Authentication

MiVaulty uses Face ID or Touch ID to unlock your vault. Biometric data is handled entirely by Apple's LocalAuthentication framework — MiVaulty never accesses, processes, or stores your biometric data. We only receive a success or failure result from the operating system.

Photo Library Access

If you choose to add images to your vault, MiVaulty requests access to your Photo Library via Apple's PhotosUI picker. Selected images are immediately encrypted and stored locally. MiVaulty does not browse, index, or access any photos you don't explicitly select.

Export & Sharing

When you export or share a note, MiVaulty creates an encrypted .vaultnote file protected with a passphrase you set. The file is handed to the iOS share sheet — you control where it goes. MiVaulty has no knowledge of the destination.

Third-Party Services

MiVaulty uses zero third-party libraries, SDKs, or services. The entire app is built with Apple's native frameworks only. There are no analytics providers, ad networks, crash reporters, or external dependencies of any kind.

Children's Privacy

MiVaulty does not collect any data from anyone, including children. Since no data is collected or transmitted, no special provisions are necessary under COPPA or similar regulations.

Changes to This Policy

If this privacy policy is updated, the revised version will be posted on this page with an updated effective date. Since MiVaulty collects no data, meaningful changes are unlikely.

Contact

If you have questions about this privacy policy or MiVaulty, you can reach us at:

tha_ultima@hotmail.com