Last updated: 3 October 2026
Vaulto is a privacy product made by Samneon Ltd (“we”), which is responsible for the personal data described here. This policy sets out exactly what little we hold and why. The short version: your vault contents are end-to-end encrypted on your device, we can't read them, and by default nothing leaves your device at all.
Your photos, videos, documents, notes and contacts — including anything you scan with the document scanner — are encrypted on your device with a key derived from your password before they are ever stored or synced. We only ever hold ciphertext. We do not have your password and cannot decrypt, read, or recover your vault contents. Your cloud sign-in (email and login password) is completely separate from your vault password and can never decrypt your data.
Vaulto doesn't collect biometric data such as Face ID, Touch ID or fingerprints.
By default, Vaulto stores everything only on your device — no account, no upload. Backing up to the cloud is something you turn on yourself. There are two choices:
Apple iCloud backup of the vault is off by default; the vault is explicitly excluded from your device's iCloud backup unless you choose to include it. Vaulto never places your vault in iCloud Drive or any browsable cloud folder.
Vaulto contains no analytics, advertising or tracking code, in the apps or on this website, and we don't follow what you do in Vaulto. What you keep in it, and what you do with it, is yours. Even the website's fonts are served from our own site, so visiting it tells no one else.
Update checks. Once a day, Vaulto asks whether a newer version is out, so it can tell you: the iPhone and iPad app asks the App Store, and the Mac, Windows and Android apps read one small file on this website. The request carries nothing about you, your account, your device or your vault.
Vaulto lets you set more than one password — a real space, a decoy space, and an optional duress password. These operate on your device (and, if you enable it, on the encrypted copy in your account). We can't tell your spaces apart; to us it's all ciphertext.
You decide what happens after a number of wrong password attempts you set: log out (signs out of your cloud account and erases nothing), erase this device (clears the vault on that one device; your encrypted cloud copy, if any, is kept so you can restore), or erase everywhere (also removes your cloud copy, for good — enabling this requires your real password). These run on your device; the “everywhere” option uses the erase token described above.
Vaulto uses your camera in two places, and only when you choose to. The document scanner takes a picture of a page and puts it straight in your vault — it is never saved to your photo library. And if you switch on break-in photos, Vaulto takes up to two photos with the front camera after three wrong passwords, so you can see who was holding your phone.
Break-in photos are encrypted the moment they are taken, with a key only your real password can open — a decoy unlock cannot see them, and neither can we. They stay on your device, and are copied to your account only if a wipe is triggered, so they aren't lost with the phone. You can delete them at any time. Your duress password never takes a photo.
Vaulto never reads your photo library. It asks for permission to add to it only if you use "Save to Photos" on an item.
On Mac, Vaulto includes tools that work entirely on your computer and send nothing to us: Privacy Guard (watches camera and microphone use), Security Check and Secure Delete (read your own disk locally), App Manager (shows and, on your instruction, removes another app's files and keychain items — macOS asks your permission first), Phone Reset (acts only on a phone you connect and choose), and the Vault Disk with sealed apps (moves an app's data onto your encrypted disk, locally). None of this data is collected or transmitted.
Purchases are processed by the Apple App Store, Google Play, or our payment processors: NOWPayments for cryptocurrency, in the checkout that opens inside the Mac app, and a card processor once card payments open. For a crypto payment we send NOWPayments only the product, the price and an order number — never your email or anything in your vault — and it tells us when the payment is confirmed. We never see or store your full card number, banking details or wallet keys; those are handled by the processor. Prices are set in US dollars, and stores show the equivalent in your local currency. We record which plan your account is on, when it renews or ends, and for a crypto payment the order (product, term, price and the email you gave for it).
You never need our permission or help to delete your vault:
“Delete All Data” leaves your account itself in place — your login email, your subscription record and the trial record — so a paid plan isn't lost.
You can delete your account yourself, from the app, at any time: open Cloud Sync in Settings and choose Delete Account, then confirm with your account password. It removes, from our servers:
Two things are kept. The trial record — the device hash and the email it was used with, no longer linked to any account — so the one free trial can't be taken again by deleting and re-creating an account. And the payment records held by the App Store, Google Play or our payment provider, which they keep as the law requires. Deleting an account never touches what is on your devices: the apps keep your vault until you delete it there.
If you no longer have the app, email support@vaulto-locker.com from the address on the account and we will delete it for you.
Your encrypted backup exists only while you keep it — the moment you delete it, it's gone from our storage. If a free trial ends without a subscription, the encrypted backup made during it is kept for 7 days and then deleted; your account and login stay, and nothing on your devices is touched. Your account and its subscription record stay until you delete the account; the trial record stays after that, as described above.
You're in control of your data by design. Your vault lives on your device — that's your own copy to keep or export — “Delete All Data” lets you erase everything, everywhere, yourself, and Delete Account removes the account too. Depending on where you live (including under the GDPR, UK GDPR, and similar laws) you also have rights to access, correct, or restrict processing of the limited account data we hold (your email and billing record); email us to exercise those. Because your vault is end-to-end encrypted, any copy we hold is ciphertext we cannot read or produce in readable form.
Our infrastructure (hosting and payments) may process data in countries other than yours. We use reputable providers and share only the minimum data described above — never your vault contents, which we cannot read.
Vaulto is not directed to children, and you must be old enough to enter into a contract in your country to use it.
We do not sell your data. We share the limited information above only with the service providers that make Vaulto work (hosting, payments), and only as needed. We may disclose information if legally required — but because your vault is end-to-end encrypted, we cannot produce its contents.
We may update this policy; material changes will be posted here with a new date.
Questions about privacy? Email support@vaulto-locker.com. We answer within 24 hours, Monday to Friday.
← Back to Vaulto