Privacy Policy

1 How Haven Vault handles your data

Your vault files stay on the device. Haven Vault ("the App", package com.havenvault.app) does not require an account.

• No Account Required: You never register, provide an email address, or create a remote profile.
• Vault stays on-device: Photos, videos, notes, files, PINs, and login secrets are encrypted locally. We cannot open your vault.
• Optional share links: Internet is used only if you tap Send / Share. The open password is not uploaded.

2 Information Stored & Encryption Architecture

All content imported into or created within Haven Vault is stored exclusively on your local device in strongly encrypted containers:

• Encrypted Media & Files: Photos, videos, audio recordings, documents, and APK packages are encrypted with AES-256-GCM (Galois/Counter Mode) with streaming chunk verification.
• Logins, Passwords & 2FA Tokens: Passwords and TOTP authentication secrets are encrypted on-device.
• Hardware-Backed KeyStore: On supported devices, master encryption keys are generated and securely stored inside the hardware-backed Android KeyStore / StrongBox secure element.
• Key Derivation: PINs and master passwords derive keys using PBKDF2 with HMAC-SHA256 (up to 210,000 iterations) with cryptographic salts.

3 Device Permissions & Why They Are Used

Haven Vault requests only the minimum permissions necessary to deliver local vault features:

• Biometric Authentication (Fingerprint / Face): Used solely to unlock the vault locally via Android BiometricPrompt. Biometric data never leaves the device's hardware security chip and is inaccessible to the App.
• Camera: Used only when you choose to take private photos or record videos directly into the encrypted vault without saving them to the public Android gallery.
• Storage Access / Photo Picker: Used only when you select files or photos to import into or export from the vault.
• Internet: Used only for optional encrypted share links (and, if enabled in the Firebase project, crash or analytics events). Core vault storage works offline.
• Package Install Permission (Optional): Required only if you choose to install an APK file that you have securely stored in your vault.

4 Privacy Controls & Advanced Security Features

• Duress Mode (Decoy Vault): If unlocked with your configured secondary PIN, Haven Vault opens an isolated, decoy storage environment without revealing or accessing your primary vault data.
• Clipboard Auto-Clear: Copied passwords and sensitive tokens can be automatically erased from your device's clipboard after a configurable timeout (15s, 30s, 1m, 2m, or permanent).
• Screen Protection: The App activates secure window flags (FLAG_SECURE) to prevent Android from capturing screenshots or previews in the recent apps task switcher.
• Recycle Bin Auto-Purge: Deleted items are staged in a private trash bin and permanently expunged automatically after 7 days (or immediately upon manual purge).

5 Backups & Portable Vault Archives

When you export a backup (.haven archive), the archive is encrypted with AES-256-GCM using your password/PIN. You have full custody of this file; you may choose to save it locally, to external USB drives, or to a personal cloud provider (Google Drive, Dropbox, OneDrive). PCN-Apps does not receive, intercept, or store your backup files.

6 Optional Encrypted Share Links

If you use Send on a message or login, the App encrypts the payload with AES-256-GCM using a share password you choose. Only that ciphertext is stored so the recipient can open a short link. The share password, PIN, and vault master key are not sent.

• Anyone with the link still needs the share password to decrypt.
• We cannot read the shared content. If you lose the share password, the link cannot be recovered by us.
• Do not put secrets in the link itself. Tell the recipient the open password through a separate channel.

7 Children's Privacy

Haven Vault is not directed at children under 13. Vault data stays on the device. Optional share links should not be used to send a child’s personal information.

8 Data Retention & Erasure

Your data stays on your device for as long as you keep the App installed. If you uninstall Haven Vault or clear the app data via Android Settings, all encrypted files, notes, passwords, and cryptographic keys are permanently erased from the device storage. Because we do not hold copies or master backdoor keys, deleted data cannot be recovered by us.

9 Contact & Privacy Inquiries

If you have questions about this Privacy Policy or the cryptographic architecture of Haven Vault, please contact us at: