How Vaulta handles your information — in plain language.
Vaulta (the "app", "we", or "us") is the luxury edition of Apz Lock — an Android app-locking and biometric security utility developed and published by Dowble Technologies Pvt. Ltd. It lets you protect your sensitive apps with fingerprint, biometric authentication, or a PIN/password. This Privacy Policy explains what the app does and does not do with information on your device. The app operates entirely on-device — it has no backend server, creates no user accounts, and does not communicate with external services to store or process your security data.
Vaulta processes the following information locally on your device only. None of it is transmitted off the device.
Your master PIN, password, or pattern is used to authenticate you when you open a protected app. It is salted, hashed with PBKDF2, and kept in AES-256 encrypted storage on your device. We never see it, cannot retrieve it, and it is never sent anywhere.
Fingerprint and face authentication are handled exclusively by Android's secure biometric framework. Vaulta only receives a success/failure result — it never sees or stores your actual biometric data.
The apps you choose to protect (their package names) and your settings — such as re-lock timeout, lock method, and optional feature toggles — are stored locally on the device so the app can enforce your locks.
If you enable the optional intruder-selfie feature, photos captured after failed unlock attempts are saved to your device's private app storage only. They are never uploaded or shared.
Vaulta does not access your contacts, call logs, location, photos library, microphone, or accounts.
| Permission | Purpose |
|---|---|
PACKAGE_USAGE_STATS(Usage access) |
To detect when you open a protected app so the lock screen can be shown. Processed on-device only. |
SYSTEM_ALERT_WINDOW(Display over other apps) |
To draw the lock screen overlay on top of a protected app when it is launched. |
USE_BIOMETRIC, USE_FINGERPRINT |
To authenticate you with fingerprint or face. Biometric data stays within Android's secure framework and never reaches app code. |
QUERY_ALL_PACKAGES |
To list installed apps so you can pick which ones to protect. This list stays on your device. |
CAMERA(Optional) |
Used only if you enable the intruder-selfie feature. Photos are stored locally and never transmitted. |
POST_NOTIFICATIONS |
To show the ongoing notification Android requires while the protection service runs. No promotional or tracking notifications are ever sent. |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE |
To run the special-use foreground service that continuously monitors app launches to enforce locks. |
RECEIVE_BOOT_COMPLETED |
To restart the protection service after your device reboots, so your apps stay protected. |
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS(Optional) |
If allowed, keeps Vaulta from being suspended in the background so protection runs reliably. You can decline and the app still works. |
VIBRATE(Optional) |
Provides haptic feedback during PIN or biometric entry. |
BIND_ACCESSIBILITY_SERVICE(Fallback) |
Used only as a fallback to detect app launches where standard methods are unavailable. Works on-device for security monitoring only. |
You can revoke any permission at any time in your device's Settings. If you deny a critical permission, the app's core lock features will not function.
Information accessed by the app is used solely to provide its core function: detecting when a protected app is opened, showing the lock screen, authenticating you, and remembering your preferences. We do not use your information for advertising, profiling, or any purpose unrelated to the features you see in the app. We do not track which apps you actually open or how often you use them.
We do not share, sell, rent, or disclose your information to anyone. Because the app has no backend and makes no network requests for your security data, your PIN, biometrics, and protected-app list never leave your device and are never sent to us or to any third party. No serversNo third partiesNo cloud
The only external system involved is the Google Play Store, which distributes the app and may collect its own installation and update data under Google's Privacy Policy. In-app "Rate", "Share app", and "Feedback" options simply open the Play Store, the Android share sheet, or your own email app when you tap them — no personal data is attached.
Your lock credentials, protected-app list, preferences, and any intruder selfies remain on your device until you delete them. You can:
All processing happens on-device and app data is kept in Android's private per-app storage, which other apps cannot read. PINs and passwords are salted, hashed, and encrypted; biometrics are handled by Android's secure framework. Because nothing is uploaded, there is no server-side database that could be breached, and no data to intercept in transit. You remain in control through Android's permission system at all times.
Vaulta is a general-purpose security utility and is not directed to children under 13. It does not knowingly collect personal information from children. Since the app collects no data and has no online component, it poses no data-collection risk to users of any age.
Vaulta does not integrate advertising networks, analytics SDKs (Google Analytics, Firebase, Mixpanel, etc.), crash-reporting services, cloud sync, or social login providers. The only authentication involved is Android's built-in biometric framework. It does not embed any third-party trackers.
Depending on where you live, you may have rights under privacy laws such as the GDPR or CCPA. Since Vaulta does not collect or hold any of your personal data on our side, there is nothing for us to access, correct, export, or delete on your behalf — full control rests with you on your device.
We may update this Privacy Policy if the app's features change. When we do, we will revise the "Effective" date above and publish the updated policy at this address. If we ever change our data practices to include any form of data transmission or collection, we will seek explicit consent before doing so. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
Questions or concerns about this policy or the app? Reach us at:
privacy@dowble.com
Dowble Technologies Pvt. Ltd. · Bengaluru, Karnataka, India