This policy covers Safe Haven Vault and any related tools published by Haven Developments ("we", "us"). It is written to be read, not to be survived.
Your vault — notes, credentials, and their metadata — is stored locally in encrypted form. Encryption and decryption happen on your device. Your master password is never transmitted and is not recoverable by us. If you forget it, we cannot restore your vault.
Sync is off unless you turn it on. If you connect Google Drive, the app uses Google's OAuth flow so that you grant access directly to your own Drive account. We never see your Google credentials. The file uploaded is your already-encrypted vault; it is not readable by Google, by us, or by anyone without your master password. You can revoke this access at any time from your Google Account permissions page, and you can delete the file from your own Drive.
If you enrol a FIDO2 security key such as a YubiKey, the app communicates with the key directly over NFC or USB on your device. No information about the key is sent to us.
If you buy a licence, a record is created containing an email address and the dates your licence and update entitlement run to. That is the entire record. It exists only so the app can confirm you are entitled to the features you paid for.
Payments are processed by Google Play Billing or Stripe. We never receive or store your card number. Those providers handle your payment details under their own privacy policies.
Safe Haven Vault is not directed at children under 13, and we do not knowingly collect personal information from them.
You may ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Because the only record we keep is an email address and licence dates, this is usually a single line to remove. Deleting it ends the licence tied to it. Email due1996cdg@gmail.com and we will action it within 30 days.
If you are in Canada you may also complain to the Office of the Privacy Commissioner of Canada. If you are in the EU or UK, you may complain to your local data protection authority.
Licence records are kept while the licence is active and for up to 7 years afterwards where tax or accounting law requires it, then deleted.
If this policy changes materially, the date at the top of this page changes and the new version is published here before it takes effect.
Haven Developments, Edmonton, Alberta, Canada — due1996cdg@gmail.com