1. Who We Are and Scope
MemoVault is provided by Secret Core Studios ("we", "us", or "our"). This Privacy Policy explains how MemoVault handles information when you use the app, including its vault, browser, Premium, support, advertising, and recovery features.
MemoVault is designed around local storage. We do not operate a cloud vault, cloud backup service, or account system for your vault contents. Some optional features rely on third-party services, described below.
2. Your Vault Content Stays on Your Device
Photos, videos, notes, documents, audio files, albums, private Contacts entries, contact profile photos, vault layout choices, wallpapers, sorting preferences, and similar vault data are stored locally on your device. MemoVault does not upload your vault content, vault password, biometric data, private Contacts, or private files to Secret Core Studios servers.
Vault access information is processed on-device. Password-related data is stored using device storage mechanisms intended for sensitive app data. Biometric authentication is handled by your device operating system; MemoVault receives only the result of the authentication attempt, not your fingerprint, face template, or other raw biometric data.
Local storage is not a substitute for a personal backup. Device loss, device failure, factory reset, app removal, cleared app data, operating-system changes, or damage may make locally stored data unavailable.
3. Data We Process Locally
To provide the app, MemoVault may process and keep the following information locally on your device: vault file names and metadata; original file locations used when returning items to your gallery; vault and recovery settings; app icon and layout preferences; selected wallpapers; sort choices; bookmarks; the selected browser search engine; private Contacts names, phone numbers, notes, and profile photos that you add; and records needed to show your current app session.
If you create an encrypted Backup, MemoVault prepares an encrypted archive in the folder you select and uses the backup password you enter to protect that archive. Backup data can include supported vault files, file metadata, album organisation, private notes, private Contacts, and private contact profile photos. The backup password and unencrypted backup contents are not sent to Secret Core Studios.
MemoVault does not provide a developer-operated online search-history service. The app does not send your browser searches, visited pages, bookmarks, or vault content to Secret Core Studios merely because you use the browser feature.
4. Browser Feature and Network Privacy
MemoVault includes an in-app browser that loads pages through Android WebView and the search engine or website you choose. MemoVault is not a VPN, proxy, anonymity service, or private relay. We do not route your browsing through Secret Core Studios servers.
When you search or visit a website, the search engine and website receive the information needed to serve that request, such as your search terms, requested address, IP address, browser/device signals, cookies, and other information they collect under their own policies. Your internet provider, network administrator, employer, school, Wi-Fi operator, DNS resolver, VPN provider, and other network services may also be able to observe connection information.
Do not assume that using the MemoVault browser, clearing a browser session, or using any private/incognito-like workflow prevents websites, search engines, networks, or a person with access to your device from observing activity. You are responsible for the sites you visit, information you submit, downloads you make, and transactions you conduct.
5. Permissions
MemoVault requests permissions only for features you choose to use. Media and file access lets you select files to import, create or restore a backup in a folder you choose, and lets the app return files to your gallery or chosen location. Camera access is used only when you use the camera or intruder-camera feature. When you use Contacts import, Android's system picker lets you choose a phone-number row and MemoVault receives only that selected name and phone number; MemoVault does not request broad access to your device contact list.
You may deny or revoke permissions through Android settings. Doing so can limit or disable the related feature. MemoVault does not gain access to every item on your device merely because a permission is granted; it uses the access needed to perform the action you request.
6. Advertising and Consent Choices
The free version may display advertising through Google AdMob. Google and its advertising partners may process advertising identifiers, IP address, device information, approximate location inferred from IP address, app interaction information, and other data described in Google's privacy materials. Where required, consent choices are presented through Google's consent tools. You can also review advertising and privacy controls in your device and Google account settings.
MemoVault Premium is intended to remove advertising from the app. Advertising providers may still process information already collected under their own retention rules, and their privacy practices remain governed by their own policies.
7. Premium, Payments, and Subscription Status
Premium subscriptions are sold and billed by Google Play. We use RevenueCat to help determine subscription entitlement and make Premium features available. RevenueCat may process a non-identifying app or device identifier, purchase and entitlement status, product and billing-period information, and store receipt or transaction data needed to validate your subscription.
Secret Core Studios does not receive or store your full payment-card number or billing address. Google Play handles payment information. RevenueCat and Google Play process their information under their own privacy policies.
8. Diagnostics, Crash Reports, and Support Feedback
MemoVault uses Firebase Crashlytics to help identify and fix app crashes and technical errors. Crash reports may include diagnostic information such as device model, operating-system version, app version, crash state, and technical event information. They are not intended to include vault files, vault passwords, or the contents of private notes.
If you use the in-app feedback form, we send the issue category, your message, platform/build information, and any email address you choose to provide to our support workflow. The current workflow uses a Discord-hosted webhook for receiving feedback. Please do not include passwords, payment details, government identifiers, or highly sensitive private content in a feedback message.
If you contact us by email, we process the information you include in the message to respond, troubleshoot, and maintain support records.
9. Google Consent Choices, Advertising, and Anonymous Usage Measurement
MemoVault uses Google’s User Messaging Platform ("UMP") consent message to present applicable privacy choices. Where required, the UMP message lets you make choices for Google advertising purposes and Google Analytics measurement purposes through Google Consent Mode. We use the choice recorded by that message to control whether MemoVault enables Firebase Analytics measurement on your device.
MemoVault does not enable its custom Firebase Analytics events until the Google consent flow has completed and indicates that the relevant Analytics storage purpose is allowed. If the consent flow is unavailable, incomplete, unknown, declined, or cannot be read, MemoVault keeps Firebase Analytics measurement disabled. The app does not use a separate in-app Analytics toggle in this version.
When enabled through that consent flow, Firebase Analytics receives only broad, anonymous custom product events so we can understand how MemoVault features are used and improve the app. Examples include a real vault opening, an app area opening, a supported item type being added or viewed, audio playback starting, a note or private contact being created, a backup or restore operation starting or completing, a Memory game starting or ending, and broad Premium-screen or offer interactions.
MemoVault does not send the contents of your private vault to Firebase Analytics. In particular, we do not send photos, videos, documents, audio, file contents, thumbnails, file names, file paths, folder names, URIs, album names, contact names, phone numbers, passwords, PINs, recovery answers, note titles, note text, browser searches, browser URLs, domains, browsing history, cookies, cache contents, or a MemoVault user account identifier as custom Analytics data. MemoVault does not set a custom Firebase Analytics user ID.
Firebase Crashlytics remains separate from these optional Analytics events and is used to help diagnose app crashes and stability problems. Google processes information through Firebase Analytics, Firebase Crashlytics, Google AdMob, and the Google UMP consent service as described in Google’s applicable privacy documentation.
10. Changing a Previous Consent Choice
Where Google UMP provides a privacy-options entry point in the app, you may use that Google-provided option to review or change the relevant consent choices. If you need to reset the MemoVault consent message on Android, you can also clear the app’s storage from Android Settings → Apps → MemoVault → Storage & cache → Clear storage / Clear data, then open MemoVault again and complete the consent flow when it is presented.
Important: clearing MemoVault’s app storage resets the Google consent message state but also removes the locally stored MemoVault vault, settings, and private app data on that device. Create and verify an encrypted backup before clearing app storage if you need to keep any local vault data.
You can also manage advertising-related preferences through the Google and device controls available to you, subject to the options offered in your region.
11. When We Share Information
We do not sell, rent, or trade vault contents. We share or make information available only as needed for the services described in this policy: Google AdMob and consent tooling for advertising; Google Play and RevenueCat for purchases; Firebase Analytics and Firebase Crashlytics for measurement and diagnostics; Discord for feedback submitted through the feedback form; and the websites, search engines, and network services you choose to use through the browser.
These third parties operate under their own terms and privacy policies. Their processing may occur in countries other than the country where you live.
12. Retention, Trash, and Deletion
Vault files, private notes, and private Contacts remain on your device until you remove them, uninstall the app, clear app data, or lose access to the device storage. Files sent to MemoVault Trash are ordinarily retained in the app for up to seven days before permanent removal. Choosing permanent deletion, emptying Trash, uninstalling, clearing app data, or certain device failures can remove data immediately or make it unrecoverable.
An encrypted Backup remains in the storage folder, removable storage, or service you selected until you delete it there. Deleting data inside MemoVault does not automatically delete previously created backup archives. If you lose the backup password, MemoVault and Secret Core Studios cannot decrypt or recover that archive.
13. Security and Your Responsibilities
MemoVault uses on-device controls, private app storage, and password-protected encrypted backup archives to help protect your content. No app, device, password, browser, encrypted archive, or network connection can guarantee absolute security. You should use strong unique vault and backup passwords, protect your device, keep Android and MemoVault updated, review downloads before opening them, and unhide, export, or back up data you need before uninstalling or resetting your device.
We cannot recover a vault password or encrypted backup password for you and cannot retrieve vault data or backup archives from a device or storage location we do not control.
14. Your Privacy Rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about certain personal data. Because vault data is stored locally and is not held by us, most control of that data is exercised directly in the app or on your device.
For support information held by Secret Core Studios, contact secretcorestudios@gmail.com with your request. For information processed by Google, RevenueCat, Firebase, Discord, search engines, websites, or network providers, you may need to contact the relevant provider directly. We may need to verify a request before acting on it.
15. Children
MemoVault is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the app. If you believe a child has provided personal information to us through support or feedback, contact secretcorestudios@gmail.com so we can review and delete it where appropriate.
16. Changes and Contact
We may update this Privacy Policy when the app, its providers, or legal requirements change. We will update the "Last updated" date and, where appropriate, provide notice in the app.
Questions or privacy requests: Secret Core Studios, secretcorestudios@gmail.com.