Privacy Policy — PromptVault

Effective date: 16 September 2025

Developer (“we”, “us”, “our”): Akansh Sirohi

Contact: akanshsirohi.dev@gmail.com

1) What this policy covers

This Privacy Policy explains what data PromptVault collects, why we collect it, how we use it, and the choices you have. PromptVault is a free, closed-source Android app. We don’t sell your data, and we don’t use your data for advertising.

2) What we collect

We aim to keep data collection minimal and only for making the app work.

  • Account data (Firebase Auth – Google Sign-In): your Google user ID, display name, email, and profile photo (if available).

*Purpose:* authenticate you, keep your content uniquely associated with your account, and prevent abuse.

  • App content you create/store (Cloud Firestore): your prompts, collections, and metadata (timestamps, simple usage flags like favorites).

*Purpose:* store and sync your content across sessions/devices.

  • Diagnostics & crash data (Firebase Crashlytics): app version, device model, OS version, crash stack traces, and non-personal technical logs.

*Purpose:* monitor stability and fix bugs.

  • Local storage on device: we may cache your content locally to enable offline use and better performance.

*Purpose:* offline-first operation and speed.

**We do not collect:** contact lists, precise location, microphone/recordings, or unrelated files.
**We do not use or sell your data** for ads or marketing. Your data is used only to provide and improve the service.

3) How we use data

  • To authenticate you with Google and maintain your session.
  • To store, sync, and back up your prompts and collections in Firestore.
  • To diagnose crashes and improve reliability using Crashlytics.
  • To enforce limits, prevent abuse, and keep the service secure.

4) Legal bases (where applicable)

  • Performance of a contract: providing the service you requested.
  • Legitimate interests: app security, service reliability, and abuse prevention.
  • Consent: your use of Google Sign-In and any permissions you explicitly grant.

5) Data sharing

We use Google Firebase (a Google service) as our processor for Auth, Firestore, and Crashlytics. Aside from Firebase’s role as our infrastructure provider, we don’t share your personal data with third parties. We don’t sell data.

6) Data retention & deletion

  • Your content: retained while your account exists or until you delete it.
  • Anonymous accounts: may be deleted at any time due to strict resource limits.
  • Service pauses: if we need to pause or discontinue the online service, we’ll show an in-app notice and provide time and instructions to back up your data so you can keep using an offline version.
  • How to delete your data: email akanshsirohi.dev@gmail.com with your request from the Google account you use with PromptVault. We’ll delete linked Firestore data within a reasonable time unless retention is required by law, security, or abuse prevention.

7) International transfers

Firebase may process and store data on servers outside your country. We rely on standard protections offered by Google/Firebase for these transfers.

8) Security

We use reasonable technical and organizational measures (Firebase security rules, least-privilege access). No method of transmission or storage is 100% secure.

9) Children

PromptVault is not directed to children under 13. If you believe a child has used the app, contact us to remove associated data.

10) Your rights

Subject to local law, you may request access, correction, export, or deletion of your data by contacting us. We will respond within a reasonable timeframe.

11) Changes

We may update this Privacy Policy. Significant changes will be communicated in-app or by updating the effective date above.

*This Privacy Policy is provided for your convenience and does not constitute legal advice.*