Your protection data
This policy covers the AppVault Android app (com.appvault.appvault). AppVault stores your protected-app list, vault entries, settings, wallpaper choices, selected icons and optional intruder photos in its private storage on your device. PINs and patterns are stored as salted hashes rather than plain text.
AppVault does not upload this protection data to an AppVault server. Android backup is disabled. Optional accounts, advertising and purchases use network services as described below.
Optional Google account and Premium
Free app protection works without an account. Premium purchases require Google sign-in to associate verified access with your account and restore it on your devices. Our AppVault backend, hosted on Oracle, stores your account identifier, email address, display name and encrypted Google Play purchase proof. We verify Google identity tokens without storing them. Session tokens are encrypted on your device and stored as hashes on the server. We do not receive your Google password or payment-card details.
We use this information only for account access, purchase verification, Premium restoration and fraud prevention. Google sign-in alone does not grant Premium. Verified access can work offline for up to seven days before another successful online check is needed. Local PINs, patterns, app lists, photos and wallpapers stay on your device.
Accessibility access
Only after you agree to the in-app disclosure and enable the service in Android Settings, AppVault receives app and window-change events, including the name of the foreground app. It compares these events with your protected-app list locally to display an unlock screen when a selected app opens.
The service does not read screen text, record your interactions, or send Accessibility data to servers or advertisers. It does not change Android settings or stop you disabling or uninstalling apps. AppVault is an app-protection tool, not a disability-assistance Accessibility tool.
Optional permissions and device features
- Display over other apps: supports showing the unlock screen when a protected app opens.
- Camera: requested for optional intruder photos after failed AppVault unlock attempts. These photos stay in AppVault's private storage unless you export them.
- Selected photos: used for wallpapers or icons you choose. Imported copies are stored on your device.
- Notifications: used for the optional protection-status notification.
- Default-home role: lets AppVault's optional launcher omit entries placed in your vault. Android Settings and other launchers can still show those apps.
- Device administration: the optional uninstall safeguard adds an Android deactivation step before uninstalling AppVault. It does not guarantee an AppVault-password prompt in every uninstall path.
- Biometrics and phone-lock authentication: handled by Android. AppVault does not receive your biometric template or Android screen-lock password.
You can decline optional access. Features that need that access will remain unavailable until you enable it.
Advertising and purchases
The free app uses Google Mobile Ads and Google's consent system. These services may process device or advertising identifiers, approximate location, app interactions and diagnostic information to deliver and measure ads, prevent fraud and maintain the service. Consent and ad privacy choices are presented where Google's consent system requires them.
Google Play processes purchases and purchase history. The AppVault backend verifies purchase proof with Google Play before enabling Premium and checks it again periodically, including for refunds or revoked purchases. AppVault does not receive your payment-card details. Play updates and these Google services require network access.
Google processes its service data under its own policies. Read Google's privacy policy, Google's advertising information and Google Play's refund information.
Retention and deletion
Protection data stays on your device until you remove it, clear AppVault's storage in Android Settings, or uninstall AppVault. Individual imported wallpapers, vault entries and intruder photos can be removed in the app. Removing a vault entry does not uninstall the underlying app or delete that app's own data.
Files you export outside AppVault must be deleted separately. Information processed by Google is retained and managed under Google's policies and account controls. Clearing AppVault storage does not cancel or refund a Google Play purchase.
Delete your AppVault account in Settings or use our account deletion page after signing in again. Deletion removes your profile, sessions and purchase records from the active database. Encrypted recovery backups expire within 30 days. Sessions expire after 30 days. Account deletion does not delete your Google account, erase your on-device protection data or refund your Play purchase. Contact the email below if you cannot access the deletion page.
AppVault's vault groups installed apps. It does not encrypt those apps' data or guarantee protection against Android system-level controls.
You stay in control
You can change AppVault settings and disable its permissions, Accessibility service and optional device-admin safeguard in Android Settings. Ad privacy options appear in AppVault when required by Google's consent system. You can also manage advertising and Google account privacy choices through Android and Google.
This privacy website does not request your app protection data or display AppVault ads. Its hosting and delivery provider, Cloudflare, may process ordinary connection information, such as an IP address and browser request, for delivery and security. The hosted site also uses Cloudflare Web Analytics to measure page visits and performance. Read Cloudflare's privacy policy for its processing practices.
We may update this policy when the app or its data practices change. The date above identifies the latest revision.
Privacy questions
AppVault developer and privacy contact: [email protected]
Please include the app version and a description of your question. Do not send your PIN, pattern, Android password or private photos.