Summary
- Your vault files are encrypted on your device. We do not run a PocketVault server for vault contents.
- We do not collect personal data from the app for analytics or advertising.
- There is no PocketVault account and no sign-up.
- Optional iCloud backup and Sync store encrypted data in your private iCloud (Apple CloudKit).
- Optional vault share may publish an encrypted package to CloudKit’s public database for claim by share ID (still needs the invitation phrase).
- Purchases use Apple In-App Purchase.
- Deleting the app deletes the vault on that iPhone (iCloud backups you made stay until you remove them).
What stays on your iPhone
The app stores only on the device (this is not “collection” by PocketVault):
- Encrypted vault files under the app’s storage
- App preferences (for example, whether you marked recovery words as saved)
- Optional Face ID / pattern material in the Secure Enclave and Keychain on this iPhone
- StoreKit purchase state managed by Apple
Knowing your iPhone passcode does not open a vault. Face ID for PocketVault does not fall back to the device passcode.
What we do not collect
We do not collect contact info, location, identifiers, usage analytics, diagnostics for ourselves, advertising data, or tracking data. There is no PocketVault analytics SDK, crash reporter, or advertising ID use. The only App Store–disclosed data type is optional User Content: encrypted backup, sync, or share packages you choose to store via iCloud/CloudKit. PocketVault does not read that content on a PocketVault server.
Purchases
PocketVault Plus is sold through Apple In-App Purchase. Apple processes payment. PocketVault does not operate its own payment or account server. See Apple’s Privacy Policy for Apple’s processing.
Backups you make
You can export an encrypted .pocketvault-backup file and store it wherever you choose
(Files, another drive, etc.). That file stays encrypted. We never receive it unless you send it to us yourself
(for example, for support — which you should not do with live vault data).
You can also choose Back up to iCloud (encrypted snapshot) or Sync this vault (encrypted change exchange with your other devices on the same Apple Account). Both use your private CloudKit database. PocketVault does not hold a copy on a PocketVault server. Apple can see that records exist and approximate sizes; your password or recovery words are required to open vault contents. Sync is eventual, not instant.
Deleting the app
Deleting PocketVault deletes the vault on that iPhone. Keep an encrypted backup, your password, and your 12 recovery words somewhere safe outside the app if you want to restore later.
This website
pocketvault.app sets no cookies and runs no analytics, ads, tracking pixels, embedded fonts from third parties or other third-party scripts. Everything, including the pattern demo, runs in your browser and sends nothing back.
Like any website, our hosting provider handles the network requests needed to deliver pages (for example your IP address and the time of the request) and may keep short-lived logs for security and abuse prevention. We don’t use them to profile visitors.
Children
PocketVault is not directed at children under 13. We do not knowingly collect personal information from children.
Changes
If this policy changes, we will update the date above and the copy in the app’s Settings › Privacy screen. Material changes that affect App Store answers will be reflected in App Store Connect as well.
Contact
Privacy questions: privacy@pocketvault.app