Last updated:
OwlVault (“the app”) is made by Jovan Ilić, an individual developer (“I”, “me”). This policy explains what happens to your data when you use the app and the website owlvault.app.
The short version
- Your photos, videos, documents and notes are encrypted on your iPhone and stay there, or in backups that you control.
- There is no OwlVault account and no OwlVault server. I cannot see, access, recover or hand over your vault contents, your pattern/PIN or your recovery phrase.
- The app contains no advertising, no analytics SDK and no tracking.
- Purchases are processed by Apple and recorded by RevenueCat, so that your Pro access works.
What stays on your device
Everything you add to a vault, including photos, videos, files, document details and expiry dates, scans and notes, is encrypted on your device with AES-256-GCM before it is stored. The encryption keys are derived from your pattern or PIN together with a key kept in your iPhone’s Keychain, and from your recovery phrase. None of these leave your device, and I never receive them.
Encrypted vault files can be included in your iPhone’s iCloud or computer backup, and you can export an encrypted backup file to a location you choose. These backups stay encrypted; they can only be opened with your recovery phrase.
Reminders
Expiry reminders are local notifications scheduled by iOS on your device. Their text is generic (“A document in OwlVault expires soon”) and never includes the document name, type or number.
Purchases
If you buy OwlVault Pro, the payment is handled by Apple. To unlock Pro features, the app uses RevenueCat, Inc., a subscription management service. RevenueCat receives an anonymous app user ID, your purchase and subscription status, device and app information needed to validate purchases, and your country/region as provided by Apple. It does not receive your vault contents. See RevenueCat’s privacy policy: https://www.revenuecat.com/privacy
I do not receive your name, email address or payment details from Apple.
Crash reports
If you have chosen to share analytics with app developers in your iPhone settings, Apple may provide me with anonymous crash reports and usage statistics. You can turn this off in Settings → Privacy & Security → Analytics & Improvements.
Website
owlvault.app does not use cookies or tracking. The website tools (such as removing location data from a photo or creating a calendar reminder) run entirely in your browser; your files are not uploaded.
Support emails
If you email me, I receive your email address and whatever you write, and use them only to reply. Please don’t send vault contents or recovery phrases by email.
Children
The app is not directed at children under 13, and I do not knowingly collect personal data from children.
Your rights
Because I do not hold your vault data, there is nothing for me to access, correct or delete on your behalf. You can delete your data at any time by deleting the vaults or the app. For purchase records held by RevenueCat or Apple, contact me and I will help with your request under the GDPR or other applicable law.
Changes
If this policy changes, I will update the date above and describe the change on this page.
Contact
Jovan Ilić
support@owlvault.app