Privacy Policy for NotiVault

1. Core Philosophy: Zero-Internet & 100% On-Device

NotiVault is built from the ground up under a strict privacy-first architecture. The application does not declare or request the android.permission.INTERNET permission. Consequently, NotiVault is technically incapable of sending, transmitting, or syncing your personal data, chat logs, media, or usage statistics to any external servers, third parties, or cloud services.

2. Information Collection and Storage

NotiVault does not collect, transmit, or store data on any remote server. All data recorded remains exclusively in your device's isolated, sandboxed local SQLite Room Database.

• Notification Contents: Recorded locally to preserve message history, analyze financial transaction alerts, and recover unsent/deleted messages from apps you select.
• WhatsApp & WhatsApp Business Media: When configured by the user via Android's Storage Access Framework (SAF) folder picker (Android/media), NotiVault creates sandboxed local copies of incoming voice notes (.opus), images, and documents so you can listen to and view them even after sender deletion. All media files remain strictly inside NotiVault's isolated internal storage (context.filesDir) and are technically incapable of network transmission.
• Biometric Credentials: Authenticated strictly via Android's native BiometricPrompt API. Biometric credentials never leave the hardware enclave (TEE/SE) and are never accessible to NotiVault.
• Screen Security (Anti-Screenshot Protection): When enabled, NotiVault applies the WindowManager.LayoutParams.FLAG_SECURE system flag to block other apps, screen recorders, and task switchers from capturing your notification archives.
• AES-256-GCM Encrypted Exports: When exporting vault archives, NotiVault utilizes PBKDF2 key derivation and AES-256-GCM authenticated encryption. The generated .nvault file can only be decrypted with your personal master password.

3. Android System Permissions & Purpose

NotiVault requests specific Android system permissions strictly for providing core on-device utilities:

4. User Data Control and Deletion

You have absolute control over your information at all times:

• Instant Erase: You can wipe all captured logs or purge unpinned records instantly from the Danger Zone within NotiVault Settings.
• Automated WorkManager Cleanup: You can schedule automatic local retention schedules (1, 7, 30, or 90 days). Notifications older than the selected retention period are automatically pruned by Android's background WorkManager while permanently protecting pinned items.
• App Uninstall: Uninstalling NotiVault permanently wipes the local SQLite database, media cache, and all associated configuration files from your device instantly without leaving residual artifacts.

5. Third-Party Analytics and Advertising

NotiVault contains no third-party advertising SDKs, tracking libraries, or analytics frameworks (e.g., no Firebase Analytics, no AdMob, no Facebook SDK).

6. Children's Privacy

NotiVault does not knowingly collect, solicit, or store personal data from children under the age of 13 (or under 16 in certain jurisdictions). Because NotiVault operates strictly offline without user accounts or server connectivity, all notification records remain exclusively on the physical device under the direct supervision of the device owner.

7. User Rights & Legal Inquiries (GDPR & CCPA/CPRA)

Because NotiVault transmits zero data across the internet and maintains no remote user accounts or databases, rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA)—such as the Right to Access, Right to Rectification, and Right to Erasure—are directly executable by you on your device at any time using the in-app "Erase All Logs" function or by uninstalling the application.

8. Developer Contact Information

If you have questions or concerns regarding this Privacy Policy or your data privacy while using NotiVault, please contact the developer:

9. Policy Updates & Modifications

We may update this Privacy Policy periodically to reflect enhancements in application features, Android OS compatibility updates, or legal standard adjustments. Any revisions or updates will be published directly on this page with an updated effective date. Because NotiVault operates strictly offline without user accounts or tracking telemetry, we encourage users to review this page periodically.