VaultMask · Privacy Policy · Support

VaultMask Privacy Policy

VaultMask: Private Redaction · Effective Date: October 26, 2026

VaultMask is an offline document redaction and text-masking application for iPhone. Everything happens on your device with zero uploads, zero accounts, and zero network requests.

1. Zero Data Collection

VaultMask does not collect, transmit, store on external servers, or share any personal data, documents, text, images, usage analytics, or diagnostics. Under Apple's App Store privacy labels, VaultMask is classified as “Data Not Collected”.

2. 100% On-Device Processing

All PDF parsing, camera document scanning, optical character recognition (OCR), PII detection (GLiNER-PII-edge and local rules), PDF rasterization, and leak verification happen locally on your device.
VaultMask contains no networking code (URLSession, NWConnection, or web views) and makes zero network requests.

3. Local Vault Storage & Deletion

If you unlock VaultMask Pro and use Persistent Vaults, replacement mappings (such as [PERSON_1]) are stored locally on your device in an AES-GCM encrypted SQLite database whose 256-bit master key is stored in your device's iOS Keychain (kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly, kSecAttrSynchronizable: false, excluded from device backups and cloud keychain synchronization).
You can permanently delete all local vaults, keys, and temporary files at any time from inside the app via Settings & About → Delete All VaultMask Data… or by uninstalling the app.

4. In-App Purchases

Optional purchases of VaultMask Pro are processed directly by Apple via StoreKit 2. VaultMask receives only an on-device cryptographic entitlement confirmation from iOS and never receives your billing or Apple Account details.

5. Contact

For support or privacy questions, contact: ohioa4@gmail.com.