Welcome to SnapVault, a private photo, video, and document vault developed by SAS Labs ("we", "us", or "our"). We are committed to protecting your personal data and your right to privacy.
This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to all users of the SnapVault iOS application ("App").
📌 Short version: Your private media never leaves your device unencrypted. We do not sell your data or use it for advertising.
SnapVault is built with a security-first architecture. All user content is encrypted before it is written to local storage or transmitted to cloud servers.
kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly protection classAES.GCM) — Apple's on-device, FIPS-validated cryptographic framework| Data | Purpose | Linked to You |
|---|---|---|
| Google Account email & display name | Authentication, account creation | Yes |
| Photos, videos, documents, text notes | Core vault functionality (encrypted) | No — encrypted |
| In-app purchase history | Subscription status verification | Yes |
| PIN (SHA-256 hash only) | Album and app lock security | No |
| Data | Purpose | Tracking |
|---|---|---|
| Device model, OS version, app version | Analytics & crash diagnostics | No |
| Anonymous usage events (screen views, feature usage) | Product improvement analytics | No |
| Break-in alert photo (front camera) | Captured locally when wrong PIN is entered; stored in your vault | No — on-device only |
| Firebase anonymous installation ID | Analytics session association | No |
🚫 We do not collect advertising identifiers (IDFA), use cross-app tracking, or share any data with advertising networks. NSPrivacyTracking is set to false.
SnapVault uses the following third-party services. Each operates under its own privacy policy.
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Authentication | Google LLC | Sign-in via Google account | firebase.google.com/support/privacy |
| Firebase Firestore | Google LLC | Encrypted cloud metadata storage | firebase.google.com/support/privacy |
| Firebase Storage | Google LLC | Encrypted media file cloud backup | firebase.google.com/support/privacy |
| Firebase Analytics | Google LLC | Anonymous usage analytics | firebase.google.com/support/privacy |
| Google Sign-In | Google LLC | OAuth 2.0 authentication | policies.google.com/privacy |
| Apple StoreKit 2 | Apple Inc. | In-app purchase processing | apple.com/legal/privacy |
All media files uploaded to Firebase Storage are encrypted with AES-256-GCM on-device before transmission. Firebase only stores ciphertext and cannot read your content.
| Permission | When Requested | Why It's Needed |
|---|---|---|
| Camera | When using in-app camera | Capture photos/videos directly into the encrypted vault |
| Photo Library (read) | When importing photos/videos | Select media to import and encrypt |
| Photo Library (write/delete) | When "Delete Originals" is enabled | Remove originals from Camera Roll after secure import |
| Microphone | When recording video | Record audio for video files |
| Face ID | When enabling biometric lock | Unlock the vault via Face ID / Touch ID (data stays in Secure Enclave) |
You can revoke any permission at any time in Settings → Privacy & Security on your device.
Encrypted media files and thumbnails are stored in the app's sandboxed container. They are automatically removed when you delete the app, or you can manually delete individual items or entire albums within the app.
If cloud sync is enabled, encrypted files are stored in Firebase Storage and metadata in Firebase Firestore under your user account. You can:
Account deletion permanently removes all data from our servers within 30 days.
SnapVault is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any right, contact us at saslabs.corp@gmail.com. We will respond within 30 days.
California residents may exercise rights under CCPA. EEA/UK residents may exercise rights under GDPR/UK GDPR. We do not sell personal information.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, through an in-app notification. Your continued use of SnapVault after changes are posted constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: