Quantum SIT · Qvaulto

Privacy Policy

In short: Qvaulto is built so that your files never leave your device. The only thing the app sends anywhere is a randomly generated Installation ID, used solely to check whether your copy of the app is licensed. We don't collect your name, don't run analytics or advertising, and can't see the contents of your vault.

Who this policy covers

This policy applies to Qvaulto (desktop and Android), developed by Quantum SIT ("we", "us"). It explains what information the app handles, what it sends off your device, and what stays local.

What we collect

Data	What it is	Why we have it
Installation ID	A random identifier generated on your device when you first install the app. It is not derived from your name, email, or any hardware identifier.	Sent to our activation server solely to check whether a license exists for this installation and, if so, to issue a signed activation code.
License records	On our activation server: the Installation ID above, plus the license duration and status an administrator issued for it.	To honor and enforce the license period you were issued.
Contact form submissions	If you write to us through the Contact page: your name, email address, and message.	To reply to your inquiry. Not used for anything else, and not added to any mailing list.

That's the complete list. We don't collect your location, contacts, browsing history, or any advertising identifiers.

What never leaves your device

Vault files and filenames — encrypted on-device (AES-256-GCM) before they're ever written to storage, with keys held in your device's own secure key store (Android Keystore, hardware-backed where the device supports it). We have no technical ability to view, back up, or recover the contents of your vault.
Your master password — never transmitted anywhere. Only a one-way cryptographic hash of it is stored on your device, used to verify you typed it correctly. The password itself cannot be recovered from that hash, by us or anyone else.
Face ID / biometric data — handled entirely by your device's operating system. Qvaulto never receives, stores, or has access to any biometric data; the app only receives a yes/no confirmation from the OS.
Two-factor authentication secret — generated and stored encrypted on your device only, the same way vault files are.

Analytics, advertising, and third parties

Qvaulto contains no analytics SDKs, no advertising SDKs, and no third-party trackers. The app makes exactly one type of network request during normal use — the license check described above, to our own activation server. We do not sell, rent, or share any data with third parties.

Data security

Vault contents are encrypted with AES-256-GCM using keys that never leave your device's secure hardware. Our activation server stores only Installation IDs and license status — never vault contents, passwords, or biometric data, because those never reach it in the first place.

Data retention and deletion

Uninstalling Qvaulto removes all locally stored data, including your encrypted vault, from your device. To request deletion of your Installation ID and license record from our activation server, or of a contact form submission, contact us.

Children's privacy

Qvaulto is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

If this policy changes, we'll update it at this same address.

Contact

Quantum SIT — quantumsit.com
Privacy inquiries: info@qvaulto.com