Get the app

Legal

Privacy policy

Vaultessa is built to keep your files on your phone. This policy explains what that means for your data.

Effective 9 November 2026

Who we are

Vaultessa ("the app") is published by AA AppCraft. Contact: aa.appcraft.dev@gmail.com.

The short version

  • We don't collect, receive or store any of your personal data.
  • Your files, folder names and settings are stored only on your phone, encrypted.
  • The app has no account, no analytics, no advertising and no servers of its own.
  • The only network connection is to Google Play: when you buy or restore Vaultessa Pro, and, if you subscribe, once a day to check that the subscription is active.

Data stored on your phone

Files you add, photos and videos you take with the in-app camera, notes and voice recordings you make in the app, intruder photos (if you switch them on), folder names and the file list are encrypted and stored in the app's private storage on your phone. Settings (such as theme, auto-lock time and sort order) are stored there too. This data never leaves your phone unless you create a backup file yourself. Excluding app data from Android's automatic backup and device-to-device transfer is part of the design.

Permissions

  • Camera: for Vaultessa's own camera, so photos and videos go straight into a folder; and, only if you switch on intruder photos in a folder, for a photo with the front camera (no sound, no preview) after a wrong pattern on the start screen. Those photos are encrypted on your phone and only that folder can show them.
  • Microphone: only when you record a voice recording or a video in Vaultessa.
  • Internet: only for Google Play: buying or restoring Vaultessa Pro, and the daily check if you subscribe.

Files are added through Android's own file picker, so Vaultessa doesn't need access to all your phone's storage. Links in the app (help pages, this website, rating the app) open in your browser or the Google Play app; Vaultessa itself sends nothing when you tap them.

Purchases

Vaultessa Pro is bought through Google Play, once (lifetime) or as a monthly or yearly subscription. Google processes the payment under its own privacy policy; we receive no payment details. With a subscription, the app asks Google Play at most once a day, when it starts, whether the subscription is still active; nothing about your files is sent.

If a subscription ends, nothing is deleted or locked away: every folder still opens. Only adding more than the free limits needs Pro again. Google's billing library, which the app must use for purchases, may send information about the purchase process to Google while it's connected.

This website

This website sets no cookies and has no analytics or advertising. To show its fonts, your browser loads them from Google Fonts, so Google receives your IP address under its own privacy policy. The web host may keep standard server logs (such as IP address, time and page) for security and operation.

Backups you create

When you create a backup, the app writes an encrypted .vaultessa file to a place you choose. What happens to that file afterwards depends on where you keep it. It can only be opened with that folder's recovery code.

Deleting your data

Delete a folder inside the app, or uninstall the app, and its data is removed from your phone. Because we hold no copy, we can't recover it for you.

Children

Vaultessa isn't directed at children under 13, and we don't knowingly collect data from anyone, of any age.

Changes

If this policy changes, the new version will be published on this page with a new effective date.

Contact

Questions about this policy: aa.appcraft.dev@gmail.com.