Privacy Policy for UR-Vault

Effective Date: 10-Dec-2025

This Privacy Policy describes how we handle information in connection with your use of the UR-Vault mobile application (the “App”).

1. Our Commitment to Zero-Knowledge Privacy

We have designed our App using a zero-knowledge security model. This means that all your sensitive data, including your password configurations and all other contents, are encrypted on your device. Only you have access to your secrets for the website or service, encryption key for backup/restore, and the device authentication needed to decrypt your data. We do not store any data on servers.

All data is stored on the device in encrypted format either in the keystore for password configurations or device file system for backup/restore. We cannot view, access, or decrypt the data stored in your device, even under subpoena.

2. Information We Do Not Collect

Due to our zero-knowledge architecture, we do not collect, store, or have access to any of the following:

• Your Secrets
• Your Password Configurations
• Your Encryption Keys

3. Information We Collect (Non-Sensitive Operational Data)

We collect minimal, non-sensitive data strictly for the purposes of app functionality, maintenance, and improvement:

• Usage Data & Analytics: We may use third-party analytics services (e.g., Google Analytics for Firebase) to collect anonymous, aggregated data about how the App is used. This helps identify crashes, fix bugs, and improve the user experience. This data does not contain any of your vault information.
• Device Information: We may collect generic device information such as device type, operating system version, and unique device identifiers to ensure compatibility and diagnose issues.
• Contact Information: If you contact us for support, we will collect your email address and the contents of your message to respond to your inquiry.

4. How We Use Information

We use the limited information we collect for the following purposes:

• To analyze how users interact with the App (anonymously) to improve performance and features.
• To provide customer support and respond to your requests.
• To comply with legal obligations and protect our rights.

5. Sharing of Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following limited circumstances:

• With your consent: We may share information if you explicitly authorize us to do so.
• Legal reasons: We may disclose information if required by law or in response to a valid request by public authorities (e.g., a court order).
• Third-Party Services: We may use minimal third-party services (e.g., for Google Sign-In support, analytics providers) who process data on our behalf. These providers are bound by strict confidentiality agreements, and importantly, the sensitive data they handle remains encrypted and unreadable by them.

6. Data Security

We implement robust security measures to protect the information under our control. All sensitive user data is protected by device OS features, and we are using industry-standard AES-256 encryption for backup and restore.

7. User Rights (GDPR & CCPA)

Depending on your location, you may have specific rights regarding your personal data. These may include the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your data.
• Object to or restrict the processing of your data.

To exercise any of these rights, please contact us at the details below.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App or on our website and updating the “Effective Date.” You are advised to review this policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: contact.bkadambi@gmail.com