This Privacy Policy (“Policy”) is provided by Apps4IOS (“Company,” “we,” “us,” or “our”) to inform users (“you” or “your”) of the Private Vault mobile application (“the App”) of the manner in which we collect, process, store, use, and disclose information. We recognize the importance of protecting your privacy, and this Policy outlines your rights and our obligations under applicable data protection laws, including but not limited to the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).
This Policy applies solely to information collected through the App and does not apply to any information collected through other applications, websites, or offline means, unless expressly stated. By accessing or using the App, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with this Policy or any part thereof, please discontinue use of the App immediately.
June 2018
Last Updated: 30 September 2026
When you set up your Private Vault profile we collect:
If you created your profile with an earlier version of the App that asked for an email address, we may still hold that address; you can ask us to delete it at any time.
Your passcodes never leave your device. The real and decoy passcodes are stored only in your device’s Keychain and are not transmitted to us.
If you subscribe to Private Cloud (optional, paid), we also collect: your account identifier and email address from Sign in with Apple or Google; the signed App Store receipt for your subscription and its transaction identifier, used to verify the purchase and link it to one Private Cloud account; the encrypted backup files and encrypted file information (file names, album names) you choose to upload, which we cannot decrypt; and the record of account actions described in Section 8.
If you turn on Break-In Report (optional), the App uses the front camera to take a photo when a wrong passcode is entered. These photos are stored only on your device, are never uploaded, and are removed when you delete them or the App.
We also collect analytics, crash and advertising data as described in Sections 6.1 and 6.2.
We do not collect biometric data (Face ID and Touch ID are handled entirely by iOS), payment card details (Apple processes all payments), precise location, or your device’s contact list. Contacts you add inside the App stay on your device.
We collect your information to:
We apply reasonable technical measures to protect the data we hold, but no system is completely secure. To the fullest extent permitted by applicable law, Apps4IOS shall not be held responsible or liable under any circumstances for any unauthorized access, data breach, system compromise, or data loss, whether arising from technical failure, human error, software defects, malicious activity, or any other cause.
We do not sell, rent, or share your personal data. We use the following service providers, each acting on our instructions under its own terms: Google (Firebase Authentication, Firestore, Cloud Functions, App Check, Remote Config, Analytics, Crashlytics, and AdMob for advertising), Cloudflare (R2 storage for encrypted backups), Apple (App Store payments, Sign in with Apple, and Search Ads attribution), and Amazon Web Services (email delivery, if we need to send you a service email). Personalized advertising in the free version may qualify as “sharing” under some U.S. state laws; Section 6.1 explains how to opt out.
The free version of Private Vault displays third-party advertisements, which are served by Google AdMob. Google may collect and use certain information (including the advertising identifier, device information, usage data, and interaction events) to deliver personalized or contextual ads based on your activity and device characteristics.
This data is collected and processed directly by the advertising provider under its own privacy policy. We do not control how this data is used or retained once shared with the ad network.
Before ads are personalized we ask for your permission: the iOS App Tracking Transparency prompt, and the Google consent form where required by law (for example in the EU and UK). If you decline, ads are still shown but are not personalized.
You can learn more or manage your preferences by visiting:
If you prefer an ad-free experience, you may choose to upgrade to the premium version of the app, which removes all advertising.
We use Google Firebase Analytics and Crashlytics to understand how the App is used and to fix crashes. This includes events such as app opens, onboarding steps, purchase attempts and feature usage; user properties such as whether you hold a premium subscription and which plan; and crash reports containing the device model, iOS version and the state of the App at the time of the crash. We also keep a live count of a few business events (upgrade attempts, onboarding, daily app access with free or paid status) in our own database. Apple Search Ads attribution tells us whether your install came from an Apple Search Ads campaign. None of this data ever includes your files, file names, passcodes, recovery code or browsing history.
Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a copy of it, to withdraw consent, and to complain to your data protection authority. In the App you can:
We retain your profile record while your account exists and delete it when you delete your account in the App. Deleting the App removes all local data on that device.
If you use Private Cloud, your backups are stored end-to-end encrypted and we cannot read them. When you remove an item from the cloud, reset your recovery code, or delete your Private Cloud account, the encrypted files are moved to an archive and kept for 30 days before permanent deletion. Archived files continue to count toward your storage quota until they are deleted. Restoring from the archive is not offered in the App and is not guaranteed. If you hold your recovery code, you may choose immediate deletion instead. If your subscription ends, your backups stay downloadable for at least 60 days and may be permanently deleted after 120 days.
To protect your account and resolve disputes, we keep a record of Private Cloud account actions: backing up, downloading or removing an item, requesting, approving, denying or cancelling a reset, generating a recovery record, and deleting the account. Each record holds the time, the action, the item identifier and size, whether the recovery key was presented, and technical details of the request (app attestation, IP address, device type). These records never include file names, file contents, your recovery code or any key material. They are retained for 13 months from the date of the action and are then removed in periodic purges; they are not deleted when you reset or delete your Private Cloud account.
Analytics and crash data are retained by Google for up to 14 months. Your App Store receipt and subscription link are retained while your Private Cloud account exists, so that renewals, lapses and refunds can be verified, and are deleted with the account.
The App is not intended for use by children under the age of 13. We do not knowingly collect data from minors. If you believe a child has provided data, please contact us immediately.
We may revise this Privacy Policy from time to time. Continued use of the App after updates constitutes acceptance of the revised policy.
The App may use cookies or similar technologies through third-party services (such as Google AdMob) to enhance functionality and deliver relevant advertising. These technologies may collect device information and usage data. You can manage your preferences in your device settings or through the ad network’s privacy controls.
In compliance with the General Data Protection Regulation (GDPR), we process personal data on the following legal bases:
Your data may be processed or stored in jurisdictions outside of your country of residence, including the United States, via services such as Google Firebase, Cloudflare, Apple and Amazon Web Services. Where required, we rely on standard contractual clauses or equivalent safeguards to ensure adequate protection of your data in cross-border transfers.
To the fullest extent permitted by applicable law, Apps4IOS shall not be held liable for any direct, indirect, incidental, consequential, special, exemplary, or punitive damages arising out of or in connection with the use of the App or Private Cloud, including but not limited to data loss, corrupted or unrestorable backups, unauthorized access, hacking access to your data, service interruptions, software defects, or security breaches, whether based in contract, tort, strict liability, or otherwise, even if advised of the possibility of such damages. The limitations, exclusions and time limits in Section 9 of the Terms & Conditions apply equally to this Policy.
By using the App, you expressly acknowledge and agree that all risk related to your data and use of the App remains solely with you. You further agree to indemnify and hold harmless Apps4IOS from and against any claims, liabilities, damages, or losses arising from your breach of this Policy, misuse of the App, or failure to implement adequate security measures on your own device. Nothing in this Policy limits rights that applicable data protection law grants you and that cannot be waived.
In the event of a merger, acquisition, reorganization, or sale of assets, user information, including Personal Data, may be transferred to the acquiring entity. We will require such entity to honor this Privacy Policy or provide materially equivalent protections.
If we become aware of a data breach that compromises your personal data, we will notify the competent supervisory authority within 72 hours where required, and affected users without undue delay, in accordance with applicable data protection laws.
Any dispute, controversy, or claim arising from or relating to this Privacy Policy shall be resolved through amicable negotiations. If unresolved within 30 days, the dispute shall be submitted to final and binding arbitration conducted in accordance with the rules of arbitration applicable in Lebanon.
If you have any questions about this Privacy Policy, you may contact us at: Email: apps4ios.88@gmail.com