VaultMyPhone Privacy Policy

1. Information we collect

We may collect account and contact information such as your name, email address, login and authentication records; subscription, plan, invoice and payment transaction information; registered device information including device identifiers, model, operating-system version and app version; backup metadata such as backup time, file type, size and storage usage; support communications; security, audit and service logs; and information you voluntarily provide.

When you enable a backup source, the Android app may access the corresponding content on your device, including contacts, SMS messages, MMS messages and attachments, call history, photos, videos and files you select or authorise. These sources are optional and controlled by you.

2. SMS, MMS and call history

We do not access this content for advertising, marketing profiling, sale of personal information, or unrelated analytics. Android and Google Play may require additional permission disclosures and consent before these sources can be accessed.

3. How we use information

We use information to create and secure your account; register and authenticate devices; provide encrypted backup and restore services; enforce plan storage and device limits; manage subscriptions, invoices and payments; operate automatic backups and renewal services; provide customer support; detect abuse, fraud and security incidents; maintain service reliability; comply with legal obligations; and improve the service.

4. Backup encryption and storage

VaultMyPhone is designed to encrypt backup content on the device before upload. Backup content is transferred to private cloud storage through the VaultMyPhone service. Permanent Hetzner or storage infrastructure credentials are not embedded in the Android application. VaultMyPhone may use short-lived authorised storage requests to permit uploads and restores.

You are responsible for securely retaining any recovery key required to decrypt your encrypted backups. If VaultMyPhone does not possess the key needed to decrypt a backup, we may be unable to recover encrypted content for you if you lose that key.

5. Payments and subscriptions

VaultMyPhone maintains subscription plans, renewal status and invoices within the VaultMyPhone system. Stripe may be used to process card payments and automatic renewal charges. We do not intend to store complete payment-card numbers on VaultMyPhone servers. Payment processors may collect and process payment information under their own privacy terms.

6. Disclosure and service providers

We may disclose information to service providers where reasonably necessary to operate VaultMyPhone, including cloud hosting/storage, payment processing, email delivery, security and technical infrastructure providers. We may also disclose information where required or authorised by law, to protect users or the service, or in connection with a lawful business transfer.

We do not sell the contents of your backups.

7. Overseas disclosure and processing

Some service providers or infrastructure may process or store information outside Australia. The countries involved depend on the infrastructure and providers configured for VaultMyPhone. Where it is practicable to identify relevant overseas locations, we will update this policy accordingly. Customers should review the current policy before using the service if overseas processing is important to them.

8. Retention

We retain information for as long as reasonably required to provide the service, secure the platform, resolve disputes and comply with legal, tax, accounting and regulatory requirements. Backup content is retained according to your account, subscription, deletion requests and applicable service rules. Certain transaction, invoice, security or fraud-prevention records may need to be retained after account deletion where legally permitted or required.

9. Access, correction and account deletion

You may request access to or correction of personal information we hold about you by contacting us. VaultMyPhone also provides an account deletion process in the Android app and through our account deletion page. When an account deletion request is completed, associated user data and backups will be deleted except information we must or are legitimately permitted to retain.

10. Security

We use technical and organisational safeguards designed to protect information, including authentication controls, encrypted transport, device-side backup encryption, restricted infrastructure credentials and service logging. No internet service can guarantee absolute security.

11. Children

VaultMyPhone is not intended for children who cannot legally consent to the service or enter the applicable agreement in their jurisdiction without a parent or guardian. Do not create an account if you are not legally permitted to do so.

12. Complaints and privacy enquiries

If you believe we have mishandled your personal information, contact us at support@vaultmyphone.com. Please provide enough information for us to investigate. We will review privacy complaints and respond within a reasonable period. Depending on your location, you may also have a right to complain to an applicable privacy regulator.

13. Changes to this policy

We may update this policy as VaultMyPhone, applicable law or our information-handling practices change. The current version will be published on this page with its last-updated date.