1. Who we are
1Vault (“we”, “us”) provides an end-to-end encrypted document vault via a mobile application and related APIs. Contact: support@1vault-app.com. Website: 1vault-app.com.
2. What this product encrypts
Before upload, the app encrypts document bytes and metadata (including names, tags, notes, and folder structure) on your device. Object storage holds ciphertext. We do not hold a key that can decrypt your documents. Search runs on your device over decrypted metadata, not on our servers.
3. Account and service data we process
To operate the service we process limited account and technical data, for example:
- Email address used to create and unlock your vault
- Authentication material derived from your password (we never receive your password in plaintext for storage as a reusable credential)
- Wrapped encryption keys that only your password, recovery code, or device biometrics can unwrap
- Document identifiers, sizes, and timestamps needed to list and delete objects
- Transactional email related to the account (for example recovery flows), sent from our mail infrastructure
- Basic server logs and security signals (IP address, timestamps, rate-limit events) to protect the service
4. What we cannot see
Because of end-to-end encryption, we cannot access document contents, plaintext filenames, tags, notes, or folder names. Support cannot open your vault or reconstruct lost keys.
5. Recovery code
At signup you receive a recovery code that can unlock your vault if you forget your password. We cannot look up or regenerate a lost recovery code. If you lose both your password and recovery code, your documents are permanently inaccessible. That is an intentional property of zero-knowledge encryption, not a support limitation we can override.
6. Why we process data
We process account and technical data to:
- Provide, secure, and improve the vault service
- Authenticate you and prevent abuse
- Send essential account messages
- Comply with law where required
7. Sharing
We do not sell your personal information. Infrastructure providers (hosting, database, object storage, email delivery) may process data on our behalf under contractual obligations. Ciphertext may be stored with our object-storage provider; they do not receive keys that decrypt your documents.
8. Retention and deletion
You may delete your vault from the app. Deletion permanently removes your account, key wraps, and document ciphertext we control. Deleted documents cannot be restored — including with a recovery code you still hold.
9. Children
1Vault is not directed at children under 13 (or the minimum age required in your country). Do not create an account for a child below that age.
10. International transfers
Service infrastructure may be located in more than one country. Where data is transferred, we rely on appropriate safeguards offered by our providers and applicable law.
11. Your choices
You can access and delete your vault from the app, update your password while unlocked, rotate your recovery code, and contact us at support@1vault-app.com for account questions that do not require reading encrypted content.
12. Changes
We may update this policy. The “Last updated” date will change when we do. Material changes may also be surfaced in the app where appropriate.
13. Contact
Privacy questions: support@1vault-app.com.