Summary
Who we are
VaultCam is an offline, encrypted recorder for Android (package org.vaultcam.app), made by Amar Duwal ("we", "us"). This policy covers the VaultCam app and the VaultCam pages on amarduwal.github.io.
Information we collect
None. We do not collect, receive, sell, or share any personal or usage data. The app cannot send data to us or anyone else, because it does not have Android's internet permission.
What VaultCam stores on your phone
To work, the app keeps the following in its own private storage on your phone. None of it is sent anywhere.
| Data | Why | How it is kept |
|---|---|---|
| Recordings (audio, video, screen) | The reason the app exists | Encrypted with AES-256-GCM as they are saved, in app-private storage. They never appear in your gallery. |
| Recording names | So you can find recordings | Encrypted. |
| Recording details (times, length, size, format, device model, Android version) | The vault list, the session log, and evidence reports | In the app's local database, with the recording. |
| SHA-256 fingerprint and session log | To show later that a recording has not changed | In the app's local database, with the recording. |
| Vault key material | To open the vault with your PIN or fingerprint | Protected by Android Keystore and bound to your phone's secure hardware. Your PIN itself is never stored. |
| Wrong-PIN counter | To pause entry after repeated wrong PINs | App settings, on the phone. |
| Settings (triggers, quality, schedule, and similar) | To remember your choices | App settings, on the phone. |
What VaultCam does not do
- No internet permission and no network calls of any kind
- No account, sign-in, or cloud storage
- No analytics, usage tracking, or advertising ID
- No ads and no advertising SDK
- No crash reporting that leaves the phone
- No access to location, contacts, or your shared storage
Encryption and the vault
- Every recording is encrypted with AES-256-GCM while it is being saved.
- The vault opens with your PIN, or with your fingerprint if you turn that on. It locks when you leave the app.
- After 4 wrong PINs, entry pauses for a while, longer each time.
- There is no recovery. If you forget your PIN, nobody can open your recordings, including us. There is no backdoor.
Copies you send out yourself
Two actions create a copy outside the vault. Both happen only when you choose them.
- Export saves an unencrypted copy to a folder you choose. Video exports remove the date, location, and device details by default; you can choose to keep them.
- Share sends an unencrypted copy to one app you pick, with a generic file name and those details removed. VaultCam deletes its temporary copy within about an hour, or the next time you open VaultCam after that.
Backups, retention, and deletion
- Your data stays on your phone until you delete it.
- Deleted recordings cannot be recovered.
- Android cloud backup and phone-to-phone transfer do not copy VaultCam's data, including the vault.
- Uninstalling VaultCam deletes everything it stored.
Permissions
VaultCam asks for each permission when you first need it. You can revoke any of them in Android settings; only the feature that needs it stops working.
| Permission | Why |
|---|---|
| Microphone | To record audio, only while you are recording. |
| Camera | To record video, only while you are recording. |
| Notifications | To show that recording is on. |
| Foreground service (microphone, camera, screen capture) | To keep recording when you leave the app or turn the screen off. |
| Foreground service (special use) | To keep triggers armed so they can start a recording. |
| Screen capture | Asked by Android each time you start a screen recording. |
| Display over other apps (optional) | For the floating recording panel and the Presentation drawing tools. |
| Exact alarms | To start a scheduled recording on time. |
| Biometric | To open the vault with your fingerprint, if you turn it on. |
Recording is always shown
Whenever VaultCam records, including recordings started by a trigger, a notification shows that recording is on, and Android shows its camera or microphone indicator. Recording laws differ by place, and some require consent from everyone being recorded. You are responsible for following the laws where you are.
Donations
The version of VaultCam distributed outside Google Play has a Support page with donation QR codes. The Google Play version has none. Opening a donation link opens your phone's browser, outside the app; VaultCam itself still makes no network calls and does not know whether you donated.
If you choose to donate, the service you use (Khalti, eSewa, PayPal, or a crypto network) processes the payment under its own privacy policy. As the recipient, the developer may see what that service shows a recipient, such as a name, account ID, or wallet address. It is used only to receive the gift and is never linked to the app.
This website
These pages are hosted on GitHub Pages and load the Inter font from Google Fonts. Those services may log standard technical data such as your IP address under their own policies. We do not add analytics or tracking to these pages.
Children
VaultCam is not directed to children under 13. It collects no personal information from anyone, including children.
Your rights
Because we hold no data about you, there is nothing for us to give you, correct, or delete. Everything VaultCam stores is on your phone and under your control: you can delete recordings in the app, or uninstall the app to remove all of it.
Changes to this policy
If this policy changes, the effective date above will change with it. If a future version of VaultCam ever handled data differently, this page would say so before that version is released.
Contact
- Developer: Amar Duwal
- Email: duwal.amar2006@gmail.com
- Website: amarduwal.github.io/vaultcam