Privacy Policy

Effective Date: February 12, 2026

1. Who We Are

VaultBox is developed and operated by Pack6 LLC, a company registered in Jamaica. In this policy, "we," "us," and "our" refer to Pack6 LLC.

2. What Data We Collect

We designed VaultBox to collect as little data as possible. Here is a complete and honest breakdown:

Data we DO NOT collect:

• Your photos, videos, or documents — all content is encrypted on your device and never transmitted to our servers
• Your PIN, recovery code, or biometric data — your PIN and recovery code are processed locally, only protected representations are stored on your device, and none of this leaves your device
• Your name, email address, or phone number
• Your location (location is only used locally for break-in alerts and is never sent to us)
• Browsing history, contacts, messages, or any other personal data
• Analytics, device fingerprints, or advertising identifiers

Data that may be collected by third parties:

• Apple (App Store & iCloud): If you purchase a subscription, Apple processes the transaction. We receive a record that a purchase was made but we do not receive your payment details, Apple ID, or name. If you enable iCloud backup within VaultBox, your encrypted data is stored in your personal iCloud account — we have no access to it.
• RevenueCat: We use RevenueCat to manage subscriptions. RevenueCat receives an anonymous app user ID and purchase transaction data from Apple. RevenueCat does not receive your name, email, or any content from your vault. You can review RevenueCat's privacy policy at revenuecat.com/privacy.

3. How Your Data Is Protected

Every photo, video, and document you store in VaultBox is encrypted using AES-256-GCM encryption via Apple's CryptoKit framework before it is saved to your device. This means:

• Your content is encrypted at rest on your device at all times
• If you enable iCloud backup, only the already-encrypted data is uploaded to your personal iCloud account — we never see the unencrypted content
• Your PIN is never stored in plaintext — it is hashed with a random salt using a one-way cryptographic function
• Recovery codes are stored only as one-way hashed values with salt on your device; we cannot retrieve your original recovery code
• Biometric authentication (Face ID / Touch ID) is handled entirely by iOS — we never receive or store biometric data

4. iCloud Backup

If you choose to enable iCloud backup (a premium feature), your encrypted vault data is stored in your personal iCloud account using Apple's CloudKit private database. This means:

• The data is associated with your Apple ID, not with us
• We cannot access, read, or decrypt your iCloud backup
• You can delete your iCloud backup at any time through your device's iCloud storage settings
• Apple's iCloud terms and privacy policy govern the storage of this data

5. Break-In Detection

If you enable break-in alerts, VaultBox may capture a photo using the front-facing camera and record the device's approximate location when an incorrect PIN is entered multiple times. This data is:

• Stored locally on your device only, encrypted like all other vault content
• Never transmitted to us or any third party
• Fully under your control — you can view, delete, or disable this feature at any time in Settings

6. Children's Privacy

VaultBox is not intended for use by anyone under the age of 16. We do not knowingly collect any information from children. The app is rated 16+ on the App Store.

7. Third-Party Services

VaultBox does not include any advertising SDKs, analytics trackers, or social media integrations. The only third-party service used is:

• RevenueCat — for subscription management only. No personal data is shared with RevenueCat beyond anonymous transaction records.

8. Data Retention & Deletion

Since we do not collect your data, there is nothing for us to retain or delete. All vault content exists solely on your device (and optionally in your personal iCloud account). To delete all VaultBox data, simply delete the app from your device and, if applicable, remove VaultBox data from your iCloud storage.

9. Your Rights

Because we do not collect personal data, most data-rights regulations (such as GDPR or CCPA) do not apply in the traditional sense. However, you always have the right to:

• Delete all your data by removing the app and its associated iCloud data
• Disable any optional feature (break-in alerts, iCloud backup) at any time
• Contact us with any privacy questions or concerns

10. Changes to This Policy

If we make material changes to this privacy policy, we will update the effective date at the top of this page and notify users through an in-app notice. Continued use of VaultBox after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this privacy policy or VaultBox's privacy practices, contact us at:

Pack6 LLC
Email: knyrmcleish@gmail.com