BioVault Privacy Policy
BioVault is built around a simple rule: your files never leave your device, and neither does anything about you.
What BioVault does
BioVault encrypts photos, videos, and documents you choose to import, using advanced encryption, and stores them only in this app's private storage on your device. Access is gated by your device's biometric authentication (fingerprint / face unlock) or, on a device with no biometric hardware enrolled, a PIN you set yourself.
Data collection
BioVault collects no data whatsoever. Specifically:
- No account, sign-up, or sign-in of any kind.
- No analytics, crash reporting, or advertising SDKs are included in the app.
- No files, filenames, thumbnails, or metadata are ever uploaded anywhere.
- Your biometric data (fingerprint/face) is never accessed, seen, or stored by BioVault — it is handled entirely by your device's operating system (Face ID / Touch ID / Android BiometricPrompt), which only tells the app "yes" or "no."
- No cloud backup, cloud sync, or remote key escrow exists for this app. The encryption key that protects your files lives only in your device's secure hardware (Secure Enclave / Android Keystore / TPM), gated by your biometric or PIN.
Network use
BioVault uses your local network only for an optional feature: sending a file directly from one of your own devices to another (e.g., phone to laptop) over your local Wi-Fi network, and for an optional phone-unlock pairing feature for a desktop with no fingerprint reader. Both of these:
- Only operate on your local network (never the internet).
- Only start when you explicitly initiate a transfer or pairing.
- Require a human-verified confirmation code on both devices before any connection is trusted.
- Never send data to BioVault's developer or to any third party — there is no server anywhere in this app's design.
Permissions BioVault requests, and why
| Permission | Why |
|---|---|
| Camera / Microphone | Only used if you tap the in-app camera button to capture a new photo/video to import. Never accessed otherwise. |
| Nearby Wi-Fi Devices | Only used to discover your other devices on the same local network for the LAN transfer / phone-unlock features above. Not used for location and not linked to your identity. |
If your device is lost, reset, or the app is uninstalled
Because there is no cloud backup and no recovery mechanism (by design — see above), the encryption key protecting your files exists only on that one device. If it is lost, factory reset, or has BioVault uninstalled, files encrypted by BioVault become permanently unreadable. BioVault warns you about this the first time you use it.
Changes to this policy
If this policy ever changes, the updated version will be published at the same URL this document is hosted at, with a new "Last updated" date above.
Contact
Questions about this policy or the app can be sent to: info.softsav@gmail.com