Who operates Vault
Vault is an iPhone and iPad app operated by Second Wind, LLC, United States. This policy covers the native Vault app and its related website. It is separate from the Teleprompter Pal app policy, even though these pages share a publishing domain.
Contact us at contact@teleprompterpal.com and identify your request as relating to Vault.
Your vault stays on your device
Vault stores file contents, thumbnails and its file catalog in encrypted form on your device. The app uses AES-256-GCM authenticated encryption and derives access from your pattern using a device-specific secret protected by iOS Keychain. Opening a file necessarily makes its readable contents available on the device while you use it.
We do not operate a Vault account service or receive your vault files, patterns, encryption keys or recovery words. Vault does not require you to register an account with us. The app has no developer-operated database of your vaults.
Photos, files and camera permissions
You choose the photos, videos and documents to import through Apple's system interfaces. Importing does not automatically remove originals from Photos or Files. If you choose to remove supported Photos originals after a verified import, the app asks separately and Apple handles the removal confirmation and Recently Deleted behavior.
Camera and microphone access is requested when you choose to capture media. Captures are prepared in protected local temporary storage, encrypted into your vault and removed from that staging location. Captures are not automatically added to your Photos library. If you deny microphone access, supported video capture can continue without audio.
Original import quality preserves the representation supplied by the source. Optimized quality can resize or re-encode media and change its metadata. Permission choices can be changed in iOS Settings.
Optional iCloud backup and sync
If you enable backup or sync, Vault sends application-encrypted backup packages to the private CloudKit area of your Apple iCloud account. This uses Apple's service rather than a storage server operated by us. Apple processes account, service and operational information under its own terms and privacy policy, including information needed to store and deliver the packages.
Your generated 12 recovery words are needed to recover the matching encrypted backup. We do not receive those words and cannot reset them. Store them separately from your device and backup.
Turning off backup or deleting a local vault does not automatically delete existing iCloud backups, other-device copies or files previously exported. Manage those copies separately using the relevant service or device.
Exports and encrypted sharing
If you export readable files or send a backup or shared vault, your selected apps, services and recipients handle those copies under their own policies. Recipients can retain copies. An encrypted shared copy uses a separate access code and cannot be remotely recalled by Vault.
Copying a sharing code is an explicit action. Vault uses a local-only clipboard item with a short expiry for that action. It does not automatically copy recovery words.
Purchases
Apple handles payments and subscription management. Vault reads verified StoreKit purchase information to decide whether Pro features are available. The Photos/Files extension uses a short-lived, device-only entitlement record in the shared Keychain. That record does not contain vault contents or vault identifiers.
We do not receive your full payment-card details. Apple may provide transaction or sales information through its developer services. Subscription cancellation is managed through your Apple Account.
Analytics and diagnostics
The native Vault app currently has no third-party analytics or advertising SDK and does not send product-usage events or automatic diagnostic reports to an analytics provider. Ordinary operating-system diagnostics may be handled by Apple according to your device and Apple Account settings.
On the Vault website, optional analytics may be enabled separately with your permission to measure page visits, referral categories and selected public action buttons. If configured, this uses PostHog and excludes selected images, image previews, filenames, file contents, free-form inputs and vault credentials. Session replay is not used. If analytics is not configured or you decline, those optional events are not sent. The website provides a choice to withdraw consent.
These policy and support pages are hosted alongside Teleprompter Pal on Vercel. That host processes connection and request data for delivery, reliability and security. The publishing site also uses Cloudflare for DNS and cookie-free Web Analytics, which measures aggregate page and performance information. Hosting and analytics providers can process technical information such as request timing, browser information and network addresses. We do not claim that visiting a website creates no technical records.
Retention, deletion and your choices
Local encrypted files remain until you delete them or remove the app. Readable temporary files are removed by the app's cleanup routines, including on locking and launch. Local deletion removes the app's references and keys for the current copy; it is not a promise of physical overwriting of flash storage. Existing backup versions or recipients' copies can still contain earlier material.
A duress pattern, if deliberately configured, removes other vaults and their local recovery access from that device. Existing cloud backups and other devices are preserved. This action does not contact us.
You can manage permissions in iOS Settings, delete local material within Vault, manage iCloud storage through Apple, and manage subscriptions through your Apple Account. Because we do not hold your vault contents or recovery credential, a support request cannot give us access to them.
Contact and policy changes
If you contact support, we receive the information you choose to include and the address needed to reply. Our email provider processes the message. We retain support correspondence as needed to handle the request, maintain relevant records and meet legal obligations. Do not send private files, your pattern, access codes or recovery words.
You may contact us to ask about information you have supplied to us or request its correction or deletion, subject to applicable rights and retention obligations. Provider processing may take place outside your country. We update this policy when our data handling changes and show the revised effective date here.