Privacy Policy
Card Vault for Android and iPhone
Last updated 6 October 2026
Card Vault collects nothing, sends nothing, and has no way to.
There is no account, no server and no analytics. On Android the app does not even request the internet permission, so the operating system itself prevents it from making a network request — this is not a promise we ask you to take on trust, it is enforced by your phone and visible on the Play Store listing.
What we collect
Nothing. No account, no sign-in, no email address, no device identifiers, no usage analytics, no advertising SDK, no crash reporting.
What leaves your device
Nothing. The app makes no network requests of any kind.
The only way information leaves your phone is if you use the Export feature yourself. That creates an encrypted backup file and hands it to your phone's own share sheet, where you choose the destination. We never see it, and it stays encrypted with your master password wherever you put it.
What is stored, and where
The card details you enter are stored in a single file inside the app's private storage, encrypted with AES. The key is derived from the master password you choose the first time you open the app.
We do not know that password and cannot recover it. If you forget it, the data cannot be decrypted by anyone, including us. That is the design, not a limitation.
The file is excluded from cloud backup — Google Drive backup on Android, iCloud and encrypted Finder/iTunes backups on iPhone — so your cards do not travel to a cloud account without you choosing it.
Scanning a card with the camera
Scan card, at the top of the Add card form, can read a card through your phone's camera so you do not have to type it. The camera is switched on only while the scanner is on screen, and switches off the moment you close it, close the form, lock the vault or leave the app.
Each camera frame is read on your phone to find four things only: the card number, the expiry date, the CVV and the name printed on the card. The frame is then discarded. Nothing is photographed, recorded, saved or sent anywhere. The details are placed in the form for you to check, and nothing is saved until you tap Save.
Permissions
The app requests no internet, storage, contacts or location access — none of it, ever. It asks for only two things, each for one purpose:
- Camera — only for scanning a card, as described above. Your phone asks you the first time you tap Scan card; if you say no, everything else works and you can type cards in instead. You can change your answer later in Android's app permissions or in the iPhone's Settings › Card Vault.
- Fingerprint, Face ID or Touch ID — only to show your
phone's own prompt if you turn on that unlock in Settings
(
USE_BIOMETRICandUSE_FINGERPRINTon Android). Your fingerprint or face never reaches the app; the phone only tells it whether the match succeeded. Your master password is then kept in the phone's secure store (the Keychain on iPhone) and released only on a match. Turning the feature off deletes it.
Because the Android app has no internet permission at all, nothing the camera sees could leave your phone even if the app tried. On iPhone, where apps are not given an internet permission to decline, the app simply makes no network requests.
Children
The app is not directed at children and collects no data from anyone, of any age.
Deleting your data
Uninstall the app. There is no other copy — no server-side account to close and nothing for us to delete on your behalf, because we never had it. Any backups you exported yourself remain wherever you put them.
Changes to this policy
If this policy ever changes, the date at the top changes with it. We do not have a mailing list to notify you on, for the same reason as everything else on this page.