Privacy Policy

Effective September 28, 2026

In short: Vaulora doesn't collect any data. The developer of Vaulora can't see what you store in it, who you are or how you use the app. There are no accounts, servers, analytics, advertising or tracking.

Our no-servers promise

Vaulora has no servers of its own, and your vault never passes through the developer's hands. Everything is encrypted on your device; the only copy that ever leaves it is the optional iCloud sync to your own iCloud account, encrypted the same way, or a backup you export yourself.

This is a commitment, not just a description of today's app:

• Vaulora will never upload your photos, files, notes or any other vault contents to servers run by the developer or anyone working for them.
• If a future version ever offers a service of its own (for example another way to sync), it will be optional, off until you turn it on, announced here beforehand, and encrypted on your device so the service only ever stores data it can't read.
• Exporting everything as a standard encrypted .7z or .zip archive will always be free, so you can leave with all your data at any time.
• If Vaulora or its developer is ever sold, merged or transferred, this policy and these promises bind the new owner. Any change to them applies only with your consent, never retroactively to data you already have.

What stays on your device

Photos, videos, files, notes, folder and file names, settings and break-in photos are encrypted on your device with AES-256 before they are saved. The key is protected by your PIN or password (with Argon2id), by your recovery key, and, if you turn it on, by Face ID or Touch ID through the device's Keychain. Nobody can open your vault without one of these, including the developer.

iCloud sync (optional)

If you turn on iCloud sync, Vaulora stores a copy of your vault in your own private iCloud database using Apple's CloudKit. The copy is exactly as encrypted as it is on your device, so it can only be opened with your PIN, password or recovery key. The developer has no access to your iCloud data. Apple's handling of iCloud data is described in Apple's Privacy Policy. You can turn sync off and delete the iCloud copy in Vaulora's settings.

Purchases

Vaulora Premium is a one-time in-app purchase, and the 7-day trial is a free one. Both are handled entirely by Apple through the App Store. Vaulora checks on your device which of them your Apple ID owns; the developer receives no personal information about you from Apple, only the anonymous sales reports Apple gives every developer.

Backups and archives you create

When you export a backup or share files, Vaulora creates the file you asked for and hands it to the share sheet. Where it goes from there is up to you. Backups and archives are protected by the password you choose.

Permissions

• Photos: to import photos and videos you choose, delete the originals if you ask it to, and save items back to your library. Vaulora doesn't browse or upload your library.
• Camera and microphone: to take photos and videos directly into the vault, and, if you turn on break-in photos, to take a photo with the front camera after wrong PIN entries. Those photos are stored encrypted in your vault.
• Face ID / Touch ID: to unlock the vault. Biometric data is handled by the operating system and never reaches Vaulora.

Things Vaulora doesn't do

• It doesn't collect analytics, crash reports, device identifiers or usage data.
• It doesn't include advertising or tracking code, or third-party code that collects data.
• It doesn't make network connections other than Apple's iCloud (only if you turn on sync) and the App Store (to check your Premium purchase).

Children

Vaulora collects no personal information from anyone, including children.

Changes

If this policy changes, the new version will be posted on this page with a new effective date. Changes never weaken the no-servers promise above without your consent.

Contact

Questions about privacy: support@vaulora.xyz