Privacy Policy

1. Overview and Scope

This Privacy Policy applies to the VaulTool mobile application (Package Name: com.vaultool.app) and the official website hosted at vaulttool.mminfocare.com, operated by MM Info Care ("we", "us", or "our").

We are firmly committed to safeguarding your privacy. VaulTool provides security features including an application lock, AES-256 file encryption vault, encrypted password manager, and intruder break-in detection without compromising your personal privacy.

2. Data Collection Policy: Zero Personal Data Collected

VaulTool operates entirely client-side on your local Android device. We do NOT collect, store, sell, or transmit any of the following:

• No Personal Identifiers: No names, phone numbers, contact lists, or physical addresses.
• No Browsing or App Activity: We do not log which apps you open, your usage statistics, or browsing history.
• No Vault Contents: Photos, videos, documents, and credentials stored inside your vault remain encrypted on your device's internal storage. We have no access to your decryption keys or files.
• No Keystroke or Screen Logging: The app never reads or records your input, typed characters, or on-screen text.
• No Advertising Trackers: The application contains zero advertising SDKs, marketing trackers, or third-party telemetry frameworks.

3. Prominent Disclosure: Android AccessibilityService API Usage

How AccessibilityService is Used:

• Foreground Window Detection: When enabled by the user in Android Settings, the service observes TYPE_WINDOW_STATE_CHANGED events to identify the package name of the application currently brought to the foreground.
• Lock Screen Presentation: If the foreground application matches an app you have designated to lock, VaulTool immediately renders its secure PIN/Biometric lock screen over the target app before its contents become visible.

What the Service Does NOT Do:

• VaulTool does NOT read, inspect, or copy text or multimedia displayed on your screen.
• VaulTool does NOT capture user keystrokes, passwords, credit card numbers, or messages.
• VaulTool does NOT record, transmit, or share any accessibility event data over the network or with any external service.

Enabling the Accessibility Service is entirely voluntary and requires explicit consent through the in-app disclosure screen. If declined, the app locker feature is disabled, while file vault and password features remain fully accessible.

4. Device Permissions and Purpose

VaulTool requests only the minimal set of permissions required for on-device security functions:

• Camera (android.permission.CAMERA): Used solely by the Intruder Selfie feature. When someone enters an incorrect PIN, the front camera quietly captures a photo of the unauthorized user. This photo is immediately encrypted with AES-256 and stored strictly inside private app storage. It is never uploaded or transmitted off the device.
• Photos & Videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO): Used exclusively when you intentionally select photos, videos, or documents from your gallery to import into the encrypted vault.
• Biometrics (USE_BIOMETRIC): Used to verify fingerprint or facial biometric authentication via Android's secure system framework (BiometricPrompt). Biometric verification takes place inside the hardware Secure Enclave; VaulTool never handles or stores biometric sensor data.
• Foreground Service (FOREGROUND_SERVICE): Ensures the background lock detection engine and scheduled auto-lock routines remain active when required.
• Internet Access (INTERNET): Used solely for processing optional Google Play in-app subscriptions and optional, user-initiated Google Drive cloud backups. No telemetry or analytics traffic is transmitted.

5. Encryption & Security Standards

Security is the foundation of VaulTool's architecture:

• AES-256-GCM Encryption: Vault files are encrypted using Android Jetpack Security with keys managed by the Android Keystore system.
• Cryptographic PIN Hashing: Your master PIN and decoy PIN are hashed using SHA-256 and salted. The raw plain-text PIN is never stored anywhere on the device or memory.
• Screen & Recording Protection: VaulTool enforces the Android FLAG_SECURE window policy to prevent screenshots, screen recording, and unauthorized previews in recent app switchers.
• Decoy PIN Safeguard: Entering a decoy PIN unlocks an empty, simulated vault environment with zero personal files, safeguarding users in coerced unlock scenarios.

6. Cloud Backup & Google Drive Integration

VaulTool offers an optional cloud backup feature for subscribers. This feature allows users to sync an encrypted archive of their vault database to their personal Google Drive account.

• Authentication is handled directly through Google Sign-In with limited application data scope (drive.appdata).
• Backups are uploaded strictly to the user's private Google account. MM Info Care does not host, intermediate, or maintain access to your Google account or backup files.

7. Data Retention & User Deletion Rights

Because all data is stored on-device:

• You can delete individual files, passwords, or break-in logs anytime directly within the app.
• Clearing the app's data in Android Settings or uninstalling the app permanently purges all encrypted vault data, database records, and settings from your device.

8. Children's Privacy

VaulTool does not knowingly collect or solicit personal data from children under the age of 13. The application does not collect personal data from any user regardless of age.

9. Policy Updates

We may update this Privacy Policy periodically to reflect app updates or regulatory requirements. Any modifications will be posted directly to this page with an updated revision date.

10. Contact Us

If you have any questions, feedback, or inquiries regarding this Privacy Policy or your privacy while using VaulTool, please contact us:

• Developer: MM Info Care
• Website: mminfocare.com
• Subdomain: vaulttool.mminfocare.com
• Email: support@mminfocare.com