Privacy Policy for SeedVault

1. Information Collection & Usage (Zero Collection)

SeedVault does not require account registration, and we do not collect, transmit, access, or store any personal data, encrypted payloads, master passwords, or seed phrases on remote servers.

• Encrypted Local Storage: All secrets, recovery phrases, and text entries created within the App are stored exclusively on your device's local storage in an encrypted format.
• No Server Infrastructure or Tracking: We do not operate backend servers, third-party advertising SDKs, behavioral tracking systems, or analytics databases.
• Zero-Knowledge Architecture: We have no technical capability to access, view, recover, or decrypt your data. Because we never possess your encryption keys or master password, we cannot recover your vault if you lose your credentials.

2. Purchases & Payment Processing

SeedVault is distributed globally as a paid application through official app marketplaces (such as Google Play).

• Third-Party Payment Processors: All transactions, billing, and license verifications are handled directly by the marketplace platform (e.g., Google Play Billing). RyuisLabs never collects, processes, or stores your credit card details, bank account numbers, or billing addresses.

3. Device Permissions

To provide core utility features, SeedVault may request the following permissions on your device only upon your explicit action:

• Camera Permission (Optional): Required solely to scan QR codes containing Encrypted JSON payloads or plaintext secrets. The camera feed is processed locally in volatile memory (RAM) in real time and is never recorded, saved to persistent storage, or transmitted over any network.
• Storage / File Access Permission (Optional): Used exclusively via your operating system's native file picker to export Encrypted JSON backup files or import existing vault backups from your local file system.

4. Cryptographic Security Standards

SeedVault employs industry-standard cryptographic primitives to secure your data at rest:

• Authenticated Encryption: Utilizes AES-256-GCM symmetric encryption combined with Argon2id / PBKDF2 memory-hard key derivation functions (KDF) to defend against offline brute-force attacks.
• Isolated Execution: All key derivation, encryption, and decryption operations execute strictly within your device's isolated memory.

5. Data Retention, Deletion & Third-Party Sharing

• Local Vault Data: Since all vault data resides solely on your device, uninstalling the App, clearing the App's storage in your device settings, or executing the in-app "Reset Vault" function will permanently and irreversibly erase all stored data immediately.
• Customer Support Inquiries: If you contact us directly via email for technical support, your email address and message contents are retained only as long as necessary to resolve your inquiry (up to 1 year) and are permanently deleted thereafter.
• Zero Third-Party Sharing or Sale: We do not sell, rent, trade, or transfer any user data to third parties across any jurisdiction.

6. International Privacy Rights (GDPR, CCPA/CPRA, PIPA & Global Laws)

Regardless of your country of residence (including the European Economic Area, United Kingdom, United States, South Korea, Japan, and other regions), we respect your statutory data protection rights:

• Right to Access, Portability, and Erasure: Because you retain 100% exclusive possession of your local data, you can directly access, export (as Encrypted JSON), modify, or permanently erase your data within the App at any time without submitting a request to us.
• CCPA / CPRA Notice (California Residents): We do not "sell" or "share" personal information as defined under the California Consumer Privacy Act.
• GDPR Legal Basis (EEA/UK Users): No personal data is processed on our servers. Any voluntary support correspondence is processed strictly under legitimate interest to respond to your request.

7. Children's Privacy (COPPA Compliance)

We do not knowingly collect, solicit, or process personal information from anyone, including children under the age of 13 (or under the applicable age of digital consent in your jurisdiction, such as 14 or 16), in full compliance with the U.S. Children's Online Privacy Protection Act (COPPA) and international equivalents.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect architectural improvements or regulatory requirements. Any material updates will be published on this page with an updated Effective Date at least 7 days prior to taking effect.

9. Contact Us

If you have any questions, concerns, or inquiries regarding this Privacy Policy or SeedVault's security practices, please contact the developer directly: