AlterVault Privacy Policy.

The short version

AlterVault has no accounts, no cloud storage, no sync and no server of our own. Everything you put in the vault is encrypted on your device and stays there. We never receive your photos, videos, documents, file names, dates, passcode or recovery phrase — not in any form, encrypted or otherwise.

The app makes exactly one kind of network request in its entire life: a purchase check with RevenueCat, and only at the moment you open the upgrade screen or tap Restore Purchases. If you never open it, the app never contacts anything at all — not at launch, not in the background, never. There is no analytics SDK, no advertising SDK and no crash reporting in the app.

What the app does with your data

1. The contents of your vault

Items you import are encrypted on your device with XChaCha20-Poly1305 and written into the app's own private storage. The key is derived from the passcode you choose and, on hardware that supports it, bound to that device's Secure Enclave, so the stored data is useless on any other device. The index of your vault — file names, sizes and dates — is encrypted as well, because that is exactly the information the vault exists to protect.

None of it is uploaded, backed up by us, or transmitted anywhere. We operate no servers for AlterVault, so there is no system of ours that could receive it.

2. Photo and media library access

The app asks for photo library access only when you choose photos or videos to import, or when you save an item from the vault back to Photos. It reads only what you select in the system picker. Nothing is scanned, uploaded or analysed, and originals in your photo library are never deleted by the app.

3. Files you import from other apps

When you import through the Files picker, the system places a plaintext copy of your file inside the app's own container and hands that copy to the app. It is encrypted into the vault and the copy is deleted immediately afterwards, along with a sweep at every launch and every lock in case the app was killed mid-import.

4. Sharing an item out of the vault

When you share or export an item, the app decrypts it into a temporary folder in the system cache and hands that file to the iOS share sheet — there is no other way for another app to receive it. That temporary file is deleted as soon as the share sheet closes, and swept at launch and on every lock. It is never written to a location that is backed up to iCloud. Once you hand a file to another app, that app's own policies apply to the copy it keeps.

5. Motion sensor

The app reads the accelerometer to detect the shake gesture. Motion data is evaluated on the device in the moment and is never recorded, stored or transmitted.

6. AlterVault Pro purchases

AlterVault Pro is an optional one-time purchase. Payment is processed entirely by Apple; we never see or store your card details, name or email, and buying does not create an account.

We use RevenueCat to validate the App Store receipt. RevenueCat receives an anonymous identifier that it generates itself, the purchase, and the store and country it came from. We do not send RevenueCat an email address, a device identifier, or anything derived from your passcode, your recovery phrase or the contents of your vault. The app contacts RevenueCat only when you open the upgrade screen or tap Restore Purchases, and at no other time.

7. What is stored on your device

AlterVault stores the following on your device only:

• Your encrypted vault: the items themselves, their thumbnails and the encrypted index, inside the app's private container.
• Your encrypted keys, held in the system keychain and marked device-only, so they are not synced to iCloud or carried to another device by a backup.
• The sealed record for your recovery phrase, if you created one. The words themselves are never stored, which is why no screen can ever show them to you again.
• A count of failed unlock attempts, used to slow down guessing at the passcode screen.
• Your app preferences, such as theme and auto-lock delay, and whether AlterVault Pro is active on this device.

All of it is removed when you delete the app — permanently, since nothing is stored anywhere else. See the Terms for what that means for your data.

What we do not collect

• Your name, email address, phone number or any account credentials — AlterVault has no accounts.
• Your photos, videos, documents, file names, dates or thumbnails, in any form.
• Your passcode, your recovery phrase, or anything derived from either.
• Your location.
• Usage analytics, screen views, session data, crash reports, or any advertising identifier. The app contains no SDK that collects any of these.
• Your payment card details, which are handled entirely by Apple.

Third-party services

Two, both tied to the optional purchase and to nothing else:

There is no analytics platform, no advertising network, no crash reporting service and no tracking pixel anywhere in the app.

Checking this for yourself

None of the above has to be taken on trust. Point any network proxy at a device running AlterVault and use the app normally: you will see no requests at all until you open the upgrade screen, and one purchase check when you do.

The App Store privacy label

Apple's label for AlterVault declares Purchases, because the receipt check described above is a purchase-related data type under Apple's definitions. It is not linked to your identity and is not used for tracking. No other category is declared, because no other category is collected.

Children's privacy

AlterVault is not directed at children under 13 years of age. We do not knowingly collect information from children, and in practice the app collects nothing that could identify anyone of any age.

Data deletion

Because AlterVault has no accounts and no cloud storage, there is nothing of yours in our systems to delete. Everything the app stores is on your device and is removed when you delete the app.

If you bought AlterVault Pro, RevenueCat holds an anonymous record of that purchase. It carries no name, email or device identifier, so there is nothing in it that identifies you — if you would like it removed anyway, email us and we will request its deletion. Apple keeps its own record of the transaction under its own policy and tax obligations, which we cannot delete on your behalf.

Changes to this policy

If we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, note the change in the app's release notes.

Contact

AlterVault is a product of Devaprime LLC. Questions or concerns about this policy: hello@altersend.com

AlterSend, our file transfer app, has its own policy at altersend.com/privacy. Nothing in this policy applies to it, and nothing in that one applies to AlterVault.