Vault Privacy Policy
Data you provide
Vault processes only items you choose to save, including accounts, identity records, files, legal and family documents, digital assets, recovery keys, private records, images, audio, and video. Sensitive content and attachments are encrypted on-device using AES-256-GCM before storage or synchronization.
iCloud infrastructure
If iCloud is available, encrypted records are stored in your private CloudKit database. Synchronization metadata can include random record identifiers, modification times, and deletion state. The app does not upload the recovery phrase, Vault password, or Face ID credential.
Recovery and daily access
A 12-word BIP-39-format phrase deterministically derives the Vault data key on-device. The daily password derives a key that wraps the data key. The wrapped key is stored in a device-only Keychain item protected by the application password and the current Face ID enrollment. Recovery also requires access to the corresponding encrypted data.
Trusted-person sharing
When you create an authorization, you enter the trusted person's Apple ID and CloudKit resolves it to a private participant. Only ciphertext copies of items you select enter the read-only sharing zone. The participant must explicitly accept the invitation and possess the correct phrase before shared ciphertext can be decrypted.
Collection and use
Vault contains no advertising, cross-app tracking, third-party analytics SDK, or AI processing. Vault contents are not sent to a developer-operated server, sold, or used for advertising or AI training.
Deletion and security limits
You can delete records in the app. An encrypted deletion marker may remain in iCloud to prevent another device from restoring a deleted record. No software can protect an already-unlocked device under malicious control or recover a phrase voluntarily disclosed or lost. Keep iOS updated and store the phrase offline, separately from the device.
Contact
保险箱隐私政策
你提供的数据
保险箱只处理你主动保存的账户、身份资料、文件、法律与家庭资料、数字资产、恢复密钥、私人档案、图片、语音和视频。敏感正文与附件使用 AES-256-GCM 在设备端加密后才会保存或同步。
iCloud 基础设施
iCloud 可用时，加密记录保存在你的私人 CloudKit 数据库中。同步元数据可能包括随机记录标识、修改时间和删除状态。App 不上传助记词、保险箱密码或 Face ID 凭证。
恢复与日常访问
12词 BIP-39 格式助记词在设备端确定性派生数据密钥。日常密码派生用于封装数据密钥的密钥；加密封套存放在仅限本设备、受应用密码和当前 Face ID 保护的 Keychain 项目中。恢复还需要取得对应的加密数据。
亲友只读授权
创建授权时，你填写亲友 Apple ID，由 CloudKit 解析为私密参与者。只有勾选项目的密文副本会进入只读共享区；参与者必须明确接受邀请，并持有正确助记词，才能解密共享密文。
收集与使用
保险箱不包含广告、跨 App 跟踪、第三方分析 SDK 或 AI 处理。保险箱内容不会发送至开发者运营的服务器，不会出售，也不会用于广告或 AI 训练。
删除与安全边界
你可以在 App 内删除记录。为防止其他设备恢复已删除内容，iCloud 中可能保留加密删除标记。任何软件都无法保护已经解锁且被恶意控制的设备，也无法挽回主动泄露或丢失的助记词。请保持 iOS 更新，并将助记词与设备分开离线保存。