← Back to VaultMail

Privacy Policy

Last Updated: February 2026

Contents

At VaultMail (developed by AppRipe / Vishnu Dutt), your privacy is not just a feature — it's the foundation of everything we build. This Privacy Policy explains how VaultMail handles your information. The short version: your data stays on your device, and we never see it.

1. Data We Collect

VaultMail accesses the following data solely for app functionality:

  • Email address and name — obtained from your Gmail account during OAuth authentication, used to display your account within the app.
  • Email messages — synced via IMAP from your Gmail account and stored only on your device using SwiftData (SQLite). Messages are never transmitted to our servers because we don't operate any.
  • OAuth tokens — stored exclusively in the iOS Keychain, which provides hardware-level encryption. Tokens are never transmitted to any server operated by us.

2. Data We Do NOT Collect

We do not collect, transmit, store, or have access to any of the following:

  • No analytics or usage data
  • No crash reporting sent to us
  • No advertising identifiers (IDFA)
  • No device fingerprinting
  • No location data
  • No contact list access beyond email participants
  • No browsing history or app usage patterns
  • No data is sold, rented, or shared with any third parties

3. On-Device Processing

All AI-powered features in VaultMail run entirely on your device:

  • Smart Replies — generated locally using on-device language models
  • Email Categorization — classification happens on your device using local ML models
  • Thread Summaries — summarization runs on-device, no data sent to cloud AI services
  • Spam Detection — analyzed locally on your device
  • Semantic Search — vector embeddings are created and indexed locally
  • Full-Text Search — powered by SQLite FTS5, running entirely on-device

No email content, metadata, or AI-generated data is ever transmitted to any external server, cloud AI service, or third party.

4. Third-Party Services

VaultMail integrates with the following third-party services:

Google OAuth

Used solely for Gmail authentication. We request email read and send scopes to provide core email functionality. Google's own privacy practices apply to their authentication service.

Google Privacy Policy: https://policies.google.com/privacy

Apple Platform Services

VaultMail uses standard iOS platform services including Keychain (for secure token storage) and SwiftData (for local data persistence). Apple's privacy practices apply to their platform services.

Apple Privacy Policy: https://www.apple.com/privacy/

5. Data Storage & Security

  • All email data is stored locally using SwiftData (encrypted SQLite) on your device
  • OAuth tokens are stored in the iOS Keychain, which provides hardware-level encryption
  • App lock is available via Face ID / Touch ID for additional security
  • We do not operate any servers — there is no server-side storage of your data
  • Uninstalling the app permanently deletes all local data from your device

6. Data Retention

  • Data persists only on your device for as long as the app is installed
  • You can delete your account data at any time from within the app's Settings
  • We have no copies of your data to retain — we never had access to it in the first place
  • Uninstalling VaultMail removes all data from your device

7. Children's Privacy

VaultMail is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to address the situation.

8. API Usage Disclosure (Apple App Store)

VaultMail uses the following system APIs for app functionality only, not for tracking:

  • UserDefaults — storing app preferences and settings
  • File timestamps — cache management and data freshness
  • Disk space APIs — calculating local storage usage for the user

These APIs are used exclusively for providing app functionality and improving user experience. None of this data is transmitted off-device.

9. Changes to This Policy

We may update this Privacy Policy if our privacy practices change. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

10. Contact

If you have any questions or concerns about this Privacy Policy or VaultMail's privacy practices, please contact us: