Gravity Vault is an offline-first, zero-knowledge privacy application. This privacy policy explains our data practices - which are, by design, minimal.
1. Information We Collect
We collect no personal data. Gravity Vault is an offline-first privacy application. We prioritize local sovereignty, but use a few industry-standard services to ensure app stability and support our free version.
- No account required
- No email address collected
- No usage data or marketing analytics
- Anonymous crash reports (to fix bugs)
- No telemetry of your private vault content
2. Your Photos, Videos, and Files
All content you add to Gravity Vault is protected on-device using advanced modern encryption with hardware-protected keys stored in your device's secure hardware chip. This content never leaves your device automatically. It only leaves when you explicitly choose to use the Quantum Bridge feature to transfer files to another of your devices, share a file to another app, or open a video in an external player - actions you always initiate yourself. We have no access to your files.
3. Encryption Keys
Your encryption keys are derived from your PIN and stored in your device's secure hardware chip. We also utilize an additional post-quantum encryption layer for enhanced long-term security. We do not receive, store, or have access to your keys at any time. We cannot decrypt your data - it is technically impossible.
4. In-App Purchases
Premium feature purchases are handled entirely by Google Play (Android) or the App Store (iOS). We receive only an anonymous entitlement token confirming your purchase. No financial information is accessible by our app.
5. Rewarded Advertisements (Daily Pass)
The optional Daily Pass feature shows a rewarded advertisement via Google AdMob. Google AdMob collects and shares your device's Advertising ID and interaction data to serve non-personalized rewarded advertisements. This request happens only when you explicitly opt in to watch an ad. AdMob's standard privacy policy applies to ad delivery: https://policies.google.com/technologies/partner-sites.
6. Artificial Intelligence
Gravity Vault uses on-device Artificial Intelligence for features like text recognition (OCR), object detection, smart search, and optional face-grouping for the People feature. All AI processing is performed locally on your hardware - no vault content, including faces, is ever transmitted to a cloud provider for analysis. Face grouping is geometric only and is never used to identify who someone is.
The optional AI Assistant (notes) feature requires you to supply your own local AI model file - the app does not include a bundled model or provide any hosted AI service, and there is no usage cap tied to a server API.
7. Quantum Bridge (P2P Transfer)
The optional Quantum Bridge feature allows for the direct transfer of vault content between your Android devices using Wi-Fi Direct. These transfers are encrypted and happen strictly over your local network. No data is routed through our servers.
8. NFC Sentinel (Optional)
The optional NFC Sentinel feature uses your device's NFC radio to communicate with a physical security key for multi-factor authentication. This interaction is entirely local and no card identifiers are stored or transmitted.
9. Location (Optional)
The optional location-tagging feature for notes uses Google Maps and the device GPS - only when you explicitly enable it and grant location permission. Elite's Trips/Places feature can also read existing GPS data already embedded in photos you import, entirely on-device. Location data is used solely to organize your content and is stored encrypted on-device. It is never transmitted to us.
10. Crash Reporting
To find and fix bugs, the app sends an anonymous crash report via Google's Firebase Crashlytics when an unexpected error occurs. These reports contain technical stack traces and basic device/OS information only. They never include your photos, notes, files, encryption keys, PIN, or any vault content, and they are not linked to your identity. Firebase Analytics is disabled. Firebase's privacy policy applies to this processing: https://firebase.google.com/support/privacy/.
11. Data Deletion
Because we hold no personal data about you, there is nothing for us to delete on our end. To remove all data, simply uninstall the app. For a formal Data Deletion Request (GDPR / CCPA), contact us at: support@gravityvaultapp.com
12. Children's Privacy
Gravity Vault does not knowingly collect data from children under 16. The app is rated for general audiences and contains no features that collect personal information.
13. Changes to This Policy
We may update this policy to reflect app changes or legal requirements. The "Last updated" date above will change. Continued use of the app constitutes acceptance of any changes.
14. Contact
For privacy questions or data deletion requests:
support@gravityvaultapp.com