Privacy Policy
Effective Date: August 3, 2026 · Developer: Karthikeyan Sriraman
Overview
OneVault is a personal records app for the things in your life that happen on a date — insurance renewals, medicine refills, document expiries, bills, vehicle servicing, birthdays — plus notes for reference information that has no date at all. Your privacy is fundamental to how this app is built. We do not collect, store, or share any of your personal data.
OneVault holds unusually sensitive information — passport and policy numbers, scanned documents, WiFi passwords, locker combinations, blood groups. That is exactly why it has no servers, no accounts, and no analytics. There is nowhere for that information to go.
Data Storage
Everything you enter into OneVault — items, categories, history entries, notes, amounts, dates and settings — is stored locally on your device using Apple's Core Data framework. This data never leaves your device except through Apple's iCloud sync, described below.
Photos and Documents
Photos and PDFs you attach to an item, a history entry or a note are stored the same way as everything else: on your device, and in your own private iCloud database if sync is enabled. They are never uploaded anywhere else and are never processed by us or by any third party.
- Camera access is requested only when you tap the camera button to capture an attachment
- Photo library access is handled by Apple's own picker — OneVault only receives the single image you choose, never your library
- Files you import are read once and copied into the app's own storage
iCloud Sync
If you have iCloud enabled on your device, OneVault uses Apple's CloudKit to sync your data across your own Apple devices. This sync happens entirely through Apple's infrastructure, into your private CloudKit database:
- Data is encrypted in transit and at rest by Apple
- Only you can access your synced data, through your Apple ID
- We have no access to your iCloud data and no ability to obtain it
- You can disable iCloud sync in your device's Settings at any time
- If you have no iCloud account, OneVault works normally and stores everything locally
Data We Do Not Collect
- No personal information (name, email, phone) — the optional name you enter for the greeting stays on your device
- No account creation, no sign-in, no password
- No usage analytics or tracking
- No device identifiers or advertising IDs
- No location data
- No cookies or web tracking
- No crash reports sent to us
Reminders and Notifications
OneVault schedules reminders as local notifications on your device. Nothing is sent to a push server, and no external service is told what your reminders are for or when they are due. If you deny notification permission, the app works normally — it simply cannot remind you.
Widgets
The Home Screen and Lock Screen widgets read a small summary written by the app into a shared container on your own device. That summary never leaves the device by any route other than your own iCloud backup.
Face ID and Touch ID
The optional app lock uses Apple's LocalAuthentication framework. OneVault is only told whether authentication succeeded or failed. Your biometric data never leaves Apple's Secure Enclave and is never accessible to the app or to us.
Third-Party Services
OneVault uses zero third-party libraries, SDKs, or services. There are:
- No analytics tools (no Google Analytics, no Firebase, no Mixpanel)
- No advertising networks
- No social media integrations
- No crash reporting services
- No document scanning, OCR, or AI services
The only external service used is Apple's own StoreKit for processing the in-app purchase, which is handled entirely by Apple under their privacy policy.
In-App Purchases
OneVault offers a one-time, non-consumable in-app purchase processed through Apple's App Store. Apple handles all payment information. We do not receive or store any payment details such as card numbers or billing addresses.
Data Retention
Your data exists only on your device and in your personal iCloud account. If you delete the app, its local data is removed with it. Data held in your private iCloud database can be managed or deleted through your device's iCloud settings.
Children's Privacy
OneVault does not knowingly collect any information from children under the age of 13. The app requires no account creation and no personal information to function.
Security
Your data is protected by:
- Apple's device-level encryption
- Optional Face ID / Touch ID app lock, configured by you
- Apple's iCloud encryption for synced data
- No network connections to any server of ours — because there are none
Note contents are deliberately never shown as a preview line in the notes list, because notes are where people keep passwords.
Changes to This Policy
If we update this privacy policy, the revised version will be posted at this URL with an updated effective date. Since we collect no data, changes would only reflect new app features or Apple platform updates.
Contact
Email: support@karthikeyansriraman.in
Website: karthikeyansriraman.in