Privacy policy | OutVault

What you keep in OutVault is encrypted on your device, and we can't read it. This page says exactly what we do keep, and why.

1. Who we are

OutVault is made by Outprobe Labs Private Limited, House No. 134, Ward No. 16, Near D.N Palace, Udhampur 182101, Jammu and Kashmir, India ("we" and "us" in this policy). Outprobe Labs Private Limited decides how the data in this policy is used. This one policy covers the OutVault apps for Android, iPhone, Mac and Windows, the OutVault browser extension, our website, and the service behind them. For anything about your privacy, write to [email protected].

2. The short version

What you keep in OutVault is encrypted on your device, and we can't read it. That covers your notes, files, photos, passwords and everything else in your vaults. It is encrypted with keys that only you hold, before anything leaves the device. We store it only in that encrypted form, and only if you use sync.
You can use OutVault without an account. Everything then stays on your device, and we receive nothing about your vaults.
If you sign in, we keep as little as the service needs to work. We never store your email address in readable form. Section 4 lists what we do keep.
There are no ads, no analytics and no tracking, in any app, the extension or our service. We never sell your data or share it for advertising.
You can delete your account at any time: in the app, or by email (section 9).

3. What stays on your device

Your vaults, your passcode, your encryption keys and your Recovery Kit live on your devices. Your passcode and your Recovery Kit words never leave the device you type them on.

OutVault asks for these device permissions, each only for the feature that needs it:

Camera: to take a photo for a vault or scan a pairing code.
Microphone: to record a voice note.
Notifications: for reminders you set and for things sent to you.
Local network and nearby devices: to find and reach your own devices for sync and Drop.
Alarms: to deliver a reminder at the time you chose.

What these capture goes into your vault, encrypted, and nowhere else.

4. What we keep when you use an account

Signing in turns on sync between your devices and Drop over the internet. To run them, our service keeps:

What	Why	In what form
Your email address	To recognise you when you sign in, and to send you sign-in codes and security notices	Not stored in readable form. We keep a keyed one-way fingerprint of it and a masked hint (for example `j•••@example.com`), so the app can show you which address you used. The full address is used only while a message to you is being sent
Sign-in methods	To let you sign in with Google or Apple	The account identifier those providers give us for you, linked to your account
Your devices	So your devices can sync and trust each other	Each device's public keys, and its name sealed so that only your devices can read it
Push tokens	So we can wake your device when something arrives	A token from Google (Android) or Apple (iPhone and Mac). The wake-up message says only that something changed, never what
Your synced vaults and files	Sync, and Drop when your devices are not on the same network	End-to-end encrypted. We hold data we cannot read, plus its size and the times it changed
Usage counts	To keep the free service within its limits	The total size stored and the number of changes, per account and per day
Security records	To stop abuse	Short-lived sign-in and confirmation codes (stored as one-way fingerprints, expiring after 10 minutes), and counters of recent attempts, keyed by a one-way fingerprint of the email address or network address

When you send with Drop, the item goes straight between your devices when they are on the same network. Otherwise it passes through our service end-to-end encrypted, and is deleted once it is delivered or when it expires.

5. Services we use

We use these providers only to run OutVault. Each handles only what its job needs:

Cloudflare hosts our service, its database and its encrypted storage, and checks requests for bots (Turnstile). Like any network provider, Cloudflare processes your device's network address and request details when your app contacts our service. Its bot check uses signals from your device to tell people from automated traffic.
ZeptoMail (Zoho) sends our emails (sign-in codes and security notices), so it receives your email address and the message.
Google delivers wake-up messages to Android devices (Firebase Cloud Messaging), which gives Google an installation identifier and the push token for the app on your device. Google also handles "Sign in with Google" if you use it.
Apple delivers wake-up messages to iPhones and Macs and handles "Sign in with Apple" if you use it. If you choose "Hide My Email", we only ever see Apple's relay address.

When you sign in with Google or Apple, their own privacy policies cover what happens on their side. The sign-in token they send us can include your name. We use only the account identifier and the email address from it, as section 4 describes, and we never keep your name.

6. What we don't do

No advertising, and no advertising identifiers.
No analytics or tracking in the apps, the browser extension or our service.
No selling of personal data, and no sharing of it for advertising.
No reading of your vaults. We can't, because we don't have the keys.

If you allow your phone or computer to share crash reports with app developers, your app store passes them to us. That is a setting on your device, and you can turn it off.

7. The browser extension

The OutVault browser extension (for Chrome, Edge and Firefox) has one purpose: it sends what you choose to save to the OutVault app on the same computer. That can be a page, highlighted text, a screenshot, an image, a file or a link. It then waits in your Inbox. We do not receive any of it. The extension has no analytics, makes no request to any server we run, and runs no code from the internet.

What it sends, and where:

What you save, sent only to the OutVault app on your own computer (127.0.0.1), together with the pairing code you copied from the app and the name of your browser, so the app can show which browser is connected.
To save an image or file, the extension fetches it from the website that hosts it, without adding cookies.

What it keeps in your browser's storage, which is not encrypted:

the pairing code and port;
items waiting while the OutVault app is closed: page text, selected text, and image or screenshot data, at most 50 items or 8 MB, each removed once delivered;
if you leave it on, a list of your last 60 saves: the kind, page title, website and time, never the content. Clear it, or switch it off, in the extension;
your settings: appearance, the menu style, the Save button, and the list of saves.

What runs on web pages:

After you save, a short script shows the "Saved to Inbox" notice on that tab.
If you switch on the optional Save button, a small helper runs on each page of the sites you allow. It watches for a text selection to place the button, and it sends nothing until you press Save.

Unpairing the extension, or removing it from your browser, deletes what it stored.

8. How long we keep it

Account data is kept while your account exists, until you delete it. We don't delete accounts for being inactive.
Codes expire after 10 minutes.
Items in transit through Drop are deleted when they are delivered, and at the latest after 24 hours.
Attempt counters are kept only for their short time window.
Request logs: our service keeps a record of each request to it for up to 7 days, to keep the service running and to investigate problems. A record holds details such as the time, the address requested, and your device's network address. It never holds your vault data, which we can't read.

9. Deleting your account

In the app: Settings > Account > Delete cloud account.
Without the app: email [email protected] from the address you sign in with.

Deletion is permanent. Section 4's data for the account is removed within about 15 minutes of an in-app deletion, and within 30 days of an emailed request. The vaults on your own devices are not touched; delete them in the app or by uninstalling it. The steps are at outvault.app/delete-account.

10. Your rights

Wherever you live, you can:

ask us what we hold about you;
ask us to correct it;
ask us to delete it;
export your vaults from the app yourself.

Depending on where you live (for example the European Union, the United Kingdom or India), you may have further rights, including the right to complain to your data protection authority. Write to [email protected], and we will answer within 30 days.

11. Security

Encryption happens on your devices, with keys only you hold, so a breach of our service would expose encrypted data and the few records listed in section 4. The flip side is that we can't recover your vaults if you lose your passcode and your Recovery Kit. Keep your Recovery Kit somewhere safe.

12. Children

OutVault is not directed at children, and we do not knowingly provide accounts to anyone under 18.

13. Where data is processed

Our service runs on Cloudflare's global network, so data may be processed in countries other than yours. What we hold about your vaults is end-to-end encrypted wherever it is.

14. Changes

When this policy changes, we update the effective date. If a change is significant, we tell you in the app or by email before it takes effect.

OutVault Privacy Policy