Privacy Policy
This Privacy Policy describes how DavianVault ("we", "our", or "the app") handles user data and protects your privacy when using the DavianVault Android application and associated website https://vault.davian.space/.
1. Zero-Knowledge Architecture
DavianVault is designed as a zero-knowledge password manager. All vault data — including passwords, user accounts, secret keys, credit card details, and confidential notes — is encrypted locally on your Android device using AES-256-GCM encryption with keys derived from your Master Password using Argon2id.
DavianVault developers do not hold your Master Password, encryption keys, or vault data. We cannot decrypt, read, or recover your data under any circumstances.
2. Google API Services & Limited Use Disclosure
DavianVault offers an optional cloud backup and synchronization feature utilizing the Google Drive API.
Requested Scope: https://www.googleapis.com/auth/drive.appdata
DavianVault's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
- Isolated AppData Access: DavianVault accesses only its private, hidden Application Data folder in your Google Drive. DavianVault does not have access to any other files or folders in your Google Drive.
- Local Encryption Before Upload: All vault data uploaded to your Google Drive AppData folder is fully encrypted on your device before transmission.
- No External Server Transfers: DavianVault does not upload your Google credentials, user data, or vault backups to any external servers or third parties.
- Strict Limited Use: Google OAuth data is used solely to provide user-initiated backup and restore functionality. It is never used for advertising, tracking, or analytics.
3. Information We Do Not Collect
- We do not collect personal identification information.
- We do not track app usage, analytics, or behavioral data.
- We do not display advertisements or include third-party advertising SDKs.
- We do not store passwords, usernames, or telemetry on remote servers.
4. User Rights & Data Control
You retain complete ownership over your data. You may delete your local vault at any time by clearing app data or uninstalling DavianVault. If you enabled Google Drive backup, you can delete your backup file directly from your Google Account settings under Connected Apps & Services.
5. Contact Us
If you have any questions regarding this Privacy Policy or DavianVault data practices, please contact us at: developers@davian.space.