Privacy Policy

We collect only what VaultWalk needs to work. Everything in (b), (c) and (d) is content you choose to add.

• a) Account: your email address, your name if Apple or Google sign-in provides it, and a user ID.
• b) Your content: photos, videos, walk-through recordings, object crops, receipts and receipt line items, and the inventory details you enter (item names, descriptions, values, quantities, rooms, purchase dates, warranties, and whether an item counts toward an insurance claim). Stored in private storage that is not publicly accessible.
• c) Health and benefits information from receipts: if you scan a pharmacy or medical receipt, VaultWalk reads and stores prescription line items and their prices, prescription (Rx) numbers, FSA/HSA-eligible totals, FSA/HSA/HRA approved amounts, and the type of benefit card used. We collect this only to calculate your medical and out-of-pocket expense totals. We do not use it for advertising, do not sell it, and do not share it with anyone except the AI provider that reads the receipt (Section 2). You can change or remove these flags on any receipt, delete the receipt, or delete your account at any time.
• d) Loyalty and rewards information from receipts: rewards program names and the points, rewards dollars, fuel discounts or visits earned, redeemed and remaining, plus any expiry date printed on the receipt. We do not store loyalty member numbers or card numbers.
• e) Usage: how you use the app, such as scan counts, item counts and export events, used to enforce plan limits and improve the app.
• f) Payments: subscription status, Pro entitlement status, and transaction identifiers from RevenueCat, Apple, Google or Stripe. We never see or store full card numbers.
• g) Device: device type, operating system, browser, IP address, and error/diagnostic logs.
• h) Camera and photo library: used only to capture or select the photos, videos and receipts you choose to add. You can revoke access in your device settings.

When you scan a room, photograph an item, or capture a receipt, the images — and any text they contain, such as merchant names, dates, amounts, prescription details, benefit-card information and loyalty balances — are sent to an AI vision service to identify items, estimate replacement values, and read receipts. We currently use the Lovable AI Gateway, which routes these requests to Google Gemini models. These providers process the images only to return results to us; we do not use your images to train AI models, and we do not permit our providers to. AI results are estimates and can be wrong — review every AI-generated name, value, receipt total, medical amount and rewards balance before relying on it.

We use your information to provide the inventory, valuation, receipt, medical-expense, rewards and claim-packet features; process subscriptions; send account emails (confirmations, sign-in links, password resets); provide support; keep the service secure; and fix bugs. We do not use your information for advertising, and we do not build profiles about you for any purpose other than delivering the features you use.

Some of what you scan can be sensitive: prescription and benefits information, and receipts from medical or cannabis dispensaries. We treat this as sensitive personal information. We use it only for the feature you asked for, never for advertising or profiling, and never sell or share it. VaultWalk is not a healthcare provider or health plan and is not a HIPAA covered entity; this policy, and the laws described in Section 11, govern how we handle this data.

• Lovable Cloud (built on Supabase): hosting, database, file storage, authentication, and account emails sent from notify.vaultwalk.app
• Lovable AI Gateway / Google Gemini: image analysis described above
• Google: Sign in with Google
• Apple: Sign in with Apple and App Store purchases
• RevenueCat: subscription management
• Stripe: web payments
• Google Play: Android purchases
• Error reporting: crash and error diagnostics so we can fix problems

Each provider processes data under its own privacy policy and only as needed to provide its service to us.

VaultWalk can let an AI assistant you choose read and update your inventory on your behalf, but only after you approve that connection on our consent screen. An assistant you connect may receive any inventory and receipt data you ask it to work with, including health, benefits and rewards details if they are in your records, and that assistant’s provider handles it under its own privacy policy. Nothing is shared with any assistant you have not connected, and you can disconnect one at any time in Settings.

We do not sell your personal data, do not share it for advertising, and do not use it for cross-context behavioral advertising. We share it only with the service providers above as needed to operate VaultWalk, with an AI assistant you have connected, or when required by law. Because we do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, there is nothing for you to opt out of; we also honor Global Privacy Control signals.

We keep your data until you delete it or delete your account. You can delete any item or receipt individually in the app. Settings → Delete Account permanently removes all of your files, inventory, receipts, merchants, rewards and health records, and then your login; this cannot be undone. Copies may remain in our provider’s encrypted backups for up to 30 days before they are overwritten. You can also email privacy@vaultwalk.app to request deletion, including if you can no longer sign in.

Your data is stored and processed on servers in the United States. VaultWalk is designed for people in the United States; if you use it from elsewhere, your data will be transferred to and processed in the United States.

Your files live in private storage that isn't publicly accessible; every database query is restricted to your own account; download links expire after one hour; and data is encrypted in transit and at rest. If we learn of a breach affecting your personal information, we will notify you as required by applicable law. No system is perfectly secure, so keep your own backups of important documents.

You can access, correct, export (use Claim Export) or delete your data at any time from within the app or by emailing privacy@vaultwalk.app. We verify requests using the email address on your account and respond within 45 days. You may use an authorized agent to make a request on your behalf.

California residents have the rights under the CCPA/CPRA to know, correct and delete their personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights. Residents of other U.S. states with comprehensive privacy laws have similar rights.

If you are in the EU or UK, we process your data to perform our contract with you, for our legitimate interest in running and securing the service, and, for camera and photo access, with your consent, which you can withdraw in your device settings. You have the right to complain to your supervisory authority.

VaultWalk is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has provided us data, contact privacy@vaultwalk.app and we will delete it.

We will post updates here with a new date and, for material changes, notify you in the app or by email.

Questions about privacy: privacy@vaultwalk.app. General support: support@vaultwalk.app. ANGEL TECH CORPORATION INDUSTRIES L.L.C., Oklahoma, USA.