Privacy Policy

1. Introduction

Aegiva Vault ("the Application", "we", "our", or "us") provides client-side encryption and offline-first storage protection for sensitive personal media and documents. We operate on a strict Zero-Knowledge architectural model: we do not operate remote databases, proprietary cloud servers, or advertising networks. We do not harvest, track, sell, or inspect any of your personal files or credentials.

2. Information We Collect

We adhere strictly to data minimization principles. We categorize information handling as follows:

3. How We Use Information

Because we collect zero data on proprietary servers, any processing occurs strictly on your device for the following exclusive purposes:

• To locally encrypt, decrypt, organize, and shred files at your command.
• To authenticate your Master PIN and derive runtime encryption keys inside device memory.
• To stream user-initiated, encrypted backup packages to Google Drive's sandboxed appDataFolder.
• To document unauthorized physical breach attempts via local, encrypted intruder photo logs.

4. Data Sharing and Third Parties

We do not sell, rent, monetize, trade, or share your files, personal data, or credentials with third parties, marketing platforms, or data brokers. Third-party interaction is limited strictly to user-directed cloud providers:

5. Security & Cryptographic Standards

We enforce military-grade client-side security architecture:

• Authenticated AES-256-GCM: All files, images, videos, audio, and metadata containers are encrypted at rest using AES-256 in Galois/Counter Mode.
• Ephemeral In-Memory Keys: The Vault Master Key (VMK) exists only in volatile RAM during active authenticated sessions and is completely purged upon session lock.
• No Master Passwords or Backdoors: There are no developer recovery backdoors. If you lose your Master PIN, your data cannot be decrypted by anyone.

6. Data Retention and Deletion

You maintain total control over the lifespan and destruction of your data:

• Local File Shredding: Purging files from the in-app Trash Bin permanently deletes database records and overwrites file references to prevent raw disk carving.
• Cloud Backup Purge: You may permanently purge all cloud backup packages directly from within the application using the "Delete Cloud Backup" tool, or via Google Drive's web interface under Settings > Manage Apps > Aegiva Vault > Options > Delete hidden app data.
• Application Removal: Uninstalling Aegiva Vault or clearing its data via Android system settings immediately deletes all local cryptographic containers, keys, and databases.

7. Data Control and Opt-Out

Aegiva Vault provides granular user controls:

• Cloud Backup Opt-Out: Cloud synchronization is entirely optional. You can disconnect your Google account or disable auto-sync at any time to keep the app strictly air-gapped.
• Permission Revocation: You can grant or revoke Camera, Notification, and Network permissions at any time via Android System Settings. Revoking Camera access simply disables Intruder Detection without affecting core vault encryption.

8. Children's Privacy

Aegiva Vault does not knowingly address, collect, or solicit personal data from children under the age of 13 (or under 16 in certain jurisdictions), in compliance with COPPA and GDPR. Because the application does not collect personal identifiers or track user profiles, no child-specific data is processed or stored on remote servers.

9. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our security implementations or legal requirements. Updates will be indicated by revising the "Effective Date" at the top of this document. We encourage users to review this page periodically to remain informed about our privacy practices.