Effective Date: November 4, 2026

Privacy Policy

Vaultron is developed and published by Treegarden Software Ltd (registered in England & Wales). Vaultron operates on a strict zero-knowledge architecture: we cannot view, reset, index, sell, or surrender your vault contents because your files and cryptographic keys never touch any server operated by Treegarden Software Ltd.

0 Analytics or Ad SDKs

No third-party telemetry, tracking pixels, fingerprinting, or crash-reporting frameworks are linked into Vaultron or vaultronsoft.app.

0 Accounts Required

We never ask for your name, email address, phone number, or social login to create, sync, or unlock a vault.

1. Information We Do Not Collect

Treegarden Software Ltd collects no personal information, usage telemetry, device identifiers, photo metadata (EXIF/GPS), scanned PDF contents, filenames, folder names, or private notes inside the Vaultron app. Backup integrity and dry-run checks execute exclusively on your device.

2. Local On-Device Cryptography & Biometrics

All key derivation (600,000-iteration PBKDF2-HMAC-SHA512) and authenticated chunk encryption (AES-256-GCM with per-file FEKs, 512-byte VFIL envelopes, and per-thumbnail TEKs) run locally on your iPhone or iPad via Apple CryptoKit.

Face ID / Touch ID: Biometric verification is performed solely by iOS/iPadOS and your device’s hardware Secure Enclave (biometryCurrentSet). Vaultron never receives biometric templates or facial geometry data.
Camera, Document Scanner & Photo Library Permissions: Requested strictly when you import media, scan documents via VisionKit, or capture direct-to-vault media, and processed locally on-device.

3. Optional Private iCloud Sync & Data Deletion

If you explicitly enable Private iCloud Sync (a Vaultron Pro feature), Vaultron uploads only client-encrypted EncryptedVaultItem records containing .vault ciphertext CKAsset streams and authenticated AES-256-GCM encryptedMetadata envelopes directly to your personal Apple iCloud Private Database container (iCloud.com.vaultron.app / VaultronEncryptedZone_v1). Neither Treegarden Software Ltd nor Apple possesses your Master Vault Key. You can permanently delete the remote CloudKit zone and local sync queues at any time inside Settings -> Security & Backup -> Delete iCloud Sync Data & Clear Cloud Outbox.

4. Website & Client-Side Browser Tools

Utilities hosted on vaultronsoft.app (including the Offline Emergency Decryptor, Photo EXIF & GPS Cleaner, and Passcode Entropy Calculator) execute strictly in local browser memory without uploading files or credentials to any server.

5. App Store Subscriptions & Billing

In-App Purchases and subscriptions are processed directly by Apple via StoreKit 2. Vaultron verifies Apple-signed JWS transaction entitlements locally on your device without transmitting receipts to an external billing server.

6. Contact & UK GDPR Rights

If you email us voluntarily for support, we use your email address solely to reply to your inquiry. For privacy or legal questions, contact Treegarden Software Ltd at [email protected] or [email protected].