TotalVault — Privacy Policy

Effective date: 16 July 2026 · App: TotalVault: Password Manager (com.totalvault.app)

The short version: TotalVault collects nothing, transmits nothing, and has no servers. The app does not have permission to access the internet, so your data physically cannot leave your device through the app.

1. Data we collect

None. TotalVault does not collect, transmit, share, or sell any personal data, usage data, analytics, or diagnostics. The app contains no advertising SDKs, no analytics SDKs, and no tracking of any kind. The app's Android manifest does not include the INTERNET permission, which means the operating system itself prevents the app from making network connections.

2. Where your data lives

Everything you store in TotalVault — passwords, usernames, notes, and encrypted files — is saved only in the app's private storage on your device, encrypted with AES-256 using a key protected by your device's hardware security module (Android Keystore) and your biometric authentication. We never see it, and neither can any other app.

3. Backups

If you create a backup, it is a single encrypted file protected by a password you choose. The backup is written to the location you select. It is never uploaded anywhere by TotalVault. If you choose to store it in a cloud service yourself, that service's privacy policy applies to the (encrypted) file. Without your backup password the file cannot be decrypted — by us or anyone else. We cannot recover a lost backup password.

4. Permissions the app uses

Biometric — to unlock your vault with your fingerprint. Biometric data is processed entirely by Android; TotalVault never sees or stores it.
Notifications & foreground service — to show a brief notification while a copied password is waiting to be automatically cleared from the clipboard.
Google Play Billing — to process the optional one-time Pro purchase. Payment is handled entirely by Google Play; TotalVault never receives your payment details. Google's processing of purchases is governed by the Google Privacy Policy.

5. Children

TotalVault is a utility app intended for general audiences and does not knowingly collect any data from anyone, including children — because it collects no data at all.

6. Changes to this policy

If this policy ever changes (for example, if a future feature required a new permission), the updated policy will be posted at this address and the app listing will be updated before the change takes effect.