Vaulta — Privacy Policy

Vaulta is committed to protecting your personal information. This Privacy Policy explains what data we process, how we use it, how we store it, and what rights you have when using the Vaulta mobile application (com.vaulta.app) and related services.

By using Vaulta, you agree to the practices described in this Privacy Policy.

1. Who We Are

Vaulta is a mobile application developed by Vauryxio Labs designed to help users track subscriptions, save links, organize categories, receive renewal reminders, and optimize expenses.

If you have any questions about this Privacy Policy or your personal data, you can contact us at:
Email: privacy@vaulta.app

2. Data We Collect

We collect only the data necessary to provide the Vaulta service.

3. How We Use Your Data

We use your data only to operate Vaulta and provide its core features, including:

• Creating and managing your account and authenticating your login session
• Syncing your data across devices while you are signed in
• Displaying your subscriptions, links, and categories
• Calculating personal summaries such as subscription spending and Split Pay shares
• Scheduling local renewal reminders and providing a notification inbox
• Restoring Vaulta Pro access across your devices
• Generating Vaulta Score, potential savings estimates, monthly reviews, and AI Coach recommendations

We do not use your data for advertising, user profiling, selling data, renting data, or third-party marketing.

4. How Your Data Is Stored

Core account and subscription data is stored securely in Supabase with Row Level Security (RLS) policies. The app also keeps a limited local copy of some data on your device to improve performance and offline access.

Your password is not stored in plain text by Vaulta. Authentication is handled by Supabase Auth, and sessions are maintained using access tokens with controlled expiration.

5. Notifications

If you enable reminders, Vaulta may process notification-related technical data such as permission settings and a device push token when available. Renewal reminders are primarily scheduled locally on your device (offline-first at 9:00 AM). We use Firebase Cloud Messaging (FCM), Expo, or operating-system infrastructure when push or local notification features are used.

6. Data Sharing

We do not share your personal data with advertisers or third parties for commercial purposes. Your data may be processed by technical service providers strictly necessary to operate Vaulta, including:

• Supabase: For authentication and database services.
• RevenueCat: For purchase-entitlement management.
• Google Play: For payment processing.
• Logo.dev: For recognized brand-logo images.
• Groq: For edge AI inference powering Vera AI Coach (Zero-Bank Linking).
• Firebase Cloud Messaging (FCM) & Expo: For notification infrastructure.

7. Vera AI Coach and Edge AI Inference

Vaulta Score, potential savings, and review suggestions use local heuristics based on the subscription information in your app.

To provide personalized advisory features through Vera AI Coach, the application transmits to the Groq API (openai/gpt-oss-120b) strictly the user's first name (userName) and the list of user-entered subscriptions (names, amounts, currencies, and billing/trial dates). This allows the assistant to provide coherent recommendations.

Vera AI operates under strict Zero-Bank Linking: it never requests, transmits, or stores banking credentials, credit/debit card numbers, CVVs, bank account numbers, or persistent identity trackers. Data processed during AI inference is not used to train public models nor sold to third parties.

8. Vaulta Pro and Payments

Vaulta Pro is purchased through Google Play. Google processes the transaction and RevenueCat receives purchase status, product identifiers, and your Vaulta App User ID to validate and restore the Pro entitlement. Vaulta does not store payment-card numbers or banking credentials.

9. Brand Logos

Vaulta locally matches recognized subscription names to a curated public domain and requests the related image from Logo.dev. Vaulta does not send your email, user ID, prices, dates, or complete subscription record in this request. Logos provided by logo.dev.

10. Data Security & Architecture

Vaulta is built on a Local-First architecture with encrypted cloud synchronization. You can manage your recurring payments and export reports even without an active internet connection. When connected, your records are backed up securely under strict per-user isolation policies (PostgreSQL Row Level Security - RLS) handled by Supabase. Zero connection with banking entities.

11. Data Retention & Right to be Forgotten

We retain your data for as long as your account remains active. If you delete your account directly from the app Settings, all associated data, including your subscriptions, links, and profile information, is permanently and irreversibly deleted from our systems.

12. Your Rights

Depending on your location and applicable law, you have the right to access, correct, delete, or request a copy of your personal data. You can perform these actions in the app Settings or by contacting us at privacy@vaulta.app. We aim to respond within 30 days.

13. Children’s Privacy

Vaulta is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. A versioned notice will appear in Vaulta's notification inbox after an update.

15. Contact

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:
privacy@vaulta.app
Please include 'Privacy' in the subject line.