OffVault collects nothing. It has no internet access, no accounts, no analytics, no ads, and no third-party services. Everything you put in your vault is encrypted and stored only on your device. We could not see your data even if we wanted to — the app is technically incapable of sending it anywhere.
None. OffVault does not collect, store, receive, or process any personal data on our side. There are no accounts and no sign-up. We do not know who you are, what you store, or even that you installed the app.
The OffVault Android app does not request the android.permission.INTERNET permission. On Android, an app without this permission cannot open any network connection. This is enforced by the operating system itself, not by our goodwill.
Inspect the app's manifest in the installed APK (for example with any APK analyzer): you will find no INTERNET permission. As a result, no data of any kind — encrypted or otherwise — can leave your device through the app.
Everything you import into OffVault stays in the app's private storage on your device and is encrypted at rest:
If you choose to export or share a decrypted copy of a file out of the vault, that copy leaves OffVault's protection and is then governed by wherever you send it. That action is always initiated by you.
Your PIN and biometric data never leave your device:
| Permission | Why it exists |
|---|---|
| USE_BIOMETRIC | Lets you unlock the vault with your fingerprint or face, via the Android system. The app never accesses biometric data itself. |
| CAMERA | Declared but not used in version 1.0. It is reserved for a planned optional "intruder selfie" feature (photographing failed unlock attempts), which will be off by default and entirely your choice if released. In the current version, the app never activates the camera. |
| VIBRATE | Haptic feedback for the PIN pad and security alerts. |
That is the complete list. OffVault does not request internet, location, contacts, microphone, SMS, or any other permission.
There are none. OffVault contains no analytics SDKs, no advertising SDKs, no crash-reporting services, no social logins, and no cloud services. We do not share data with anyone because there is no data to share and no channel to share it through.
Your data exists in exactly one place: your device. Because of that, deletion is simple and absolute:
This is a deliberate security design. We have no servers, no account system, and no copy of your keys, so if you forget your PIN, your data cannot be recovered — by you, by us, or by anyone else. Please choose a PIN you will remember, and keep your own copies of anything irreplaceable before importing it.
OffVault is not directed at children under 13, and we do not knowingly collect personal information from anyone — children included, since the app collects no data at all. If you are a parent or guardian with questions, contact us at the address below.
If we ever change how OffVault works in a way that affects privacy (for example, releasing the optional intruder-selfie feature), we will update this policy, revise the effective date at the top, and describe the change plainly. Our core commitment will not change: OffVault is an offline app, and your vault contents are yours alone.
Questions about this policy or about OffVault's privacy practices:
Email: jkclaude143@gmail.com