Privacy Policy for Strong Vault

Last updated: 9 September 2026

Strong Vault ("the App") is committed to protecting your privacy. This Privacy Policy explains how we handle your information.

What data we store — and where

Strong Vault is designed to be zero-knowledge. Your vault data — documents, photos, passwords, notes, and metadata — is encrypted on your device using AES-256-GCM before being stored locally in the app's IndexedDB storage. The encryption key is derived from your PIN using Argon2id and never leaves your device.

No Data Sharing

Since your vault data never leaves your device, we do not collect, sell, share, or transmit your personal information to any third parties.

DigiLocker

When you connect DigiLocker, we use PKCE OAuth 2.0 to obtain a short-lived access token. This token is stored only in the app's session storage and is deleted when you close the app or tab. We do not store DigiLocker tokens on our servers.

Biometric and Authentication Data

If you use biometric authentication (fingerprint, face recognition) or a PIN to secure the app, this authentication is handled entirely by your device's operating system. Strong Vault does not have access to, collect, or store your biometric data.

Permissions

The App may request certain device permissions (such as storage or camera access) solely to enable core functionality like saving, scanning, and retrieving your vault contents. These permissions are used only on-device and not for data collection.

Your rights (GDPR / DPDP 2023)

Right to access: See Settings → Export for a full export of your vault data.
Right to erasure: Use Settings → Danger Zone to wipe vault data on this device, or clear storage for the app.
Right to portability: Export as JSON at any time from Settings → Export.
Right to withdraw consent: Change analytics preferences when prompted in the app.

Third-party sub-processors

Processor	Purpose	Location
Google	Optional DigiLocker OAuth only	USA
Firebase / Google	Web hosting	USA
Google Play Billing	In-app purchases and subscriptions	USA

Children's Privacy

Strong Vault does not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated revision date.

Contact Us

Data protection enquiries: privacy@strongvault.app
General support: sumanthlearning1984@gmail.com