Your Privacy Choices

Do We Sell or Share Your Personal Information?

No. Vaultist does not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. You do not need to take any action to opt out because no sale or sharing for advertising purposes occurs.

What Personal Information We Hold

Vaultist collects only the following categories of personal information:

• Account identifiers: Your email address, used to create and authenticate your account.
• Device performance data: Redacted MetricKit payloads from iOS (anonymized crash diagnostics and performance metrics; personally identifiable fields are stripped before transmission).
• Optional analytics: Aggregate, anonymous usage signals when you opt in during onboarding. No individual identity or network activity is included.
• Connection diagnostics: Server identifier, transport protocol, interface type, handshake duration, aggregated byte counts, and failure categories. Stored locally on your device; only the two most recent successes and two most recent failures are retained. Destination IPs, DNS queries, and hostnames are never recorded.
• Trial verification signal: Whether a free trial was granted, denied, or is pending. No device identifier is stored by Vaultist; the per-device flag is maintained by Apple via DeviceCheck.

Your Rights (California Residents)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to:

• Know what personal information we have collected, disclosed, or sold.
• Delete personal information we hold about you, subject to limited exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — not applicable here because we do not sell or share.
• Non-discrimination: we will not treat you differently for exercising any of these rights.

How to Submit a Request

Email [email protected] with the subject line "California Privacy Request" and include:

• The right you wish to exercise (Know, Delete, or Correct)
• The email address associated with your Vaultist account

We will verify your identity before processing the request and respond within 45 calendar days. If we need additional time (up to 90 days total), we will notify you in writing. There is no fee for a reasonable request.

Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf. The agent must provide written proof of authorization, and we may still contact you directly to verify your identity.

Managing Analytics on Your Device

You can change your analytics preference at any time in the Vaultist app settings. Disabling analytics stops the transmission of optional usage signals. MetricKit performance data is managed by iOS and delivered on a system level; the redaction filter ensures no personally identifiable information is included before transmission.

Contact

For privacy-related questions, contact us at [email protected].