Privacy Policy
At Onyx Vault, we take your privacy with absolute seriousness. Our app is built on a Zero-Knowledge Architecture. This means that we design our software so that we have zero access to your master credentials, security keys, or saved codes. Your private data is completely invisible to us, and we never collect, transmit, or store it on any external servers.
1. Information Collection and Use
Onyx Vault does not collect or store any of your personal data or recovery codes. All sensitive data (including account names, emails, recovery codes, and notes) is encrypted and decrypted locally on your physical device. We do not operate databases or user accounts on our servers, and we have no mechanism to view your stored keys.
2. Data Encryption and Storage
Your database of backup codes is locked behind your device's biometric security (Face ID or Touch ID) and is encrypted using local secure keys:
- Local Encryption: All codes are scrambled using industry-standard AES-256-GCM encryption before being written to local storage.
- Secure Enclave: Cryptographic decryption keys are locked inside the Apple device's Secure Enclave via Keychain APIs. We never see or store your passcode.
3. iCloud Synchronization
Onyx Vault automatically synchronizes your encrypted database across your own Apple devices in the background using Apple's iCloud Drive services:
- Synchronization is routed directly through your private Apple iCloud container.
- Your database is saved inside a private, hidden ubiquity container (which is invisible in Apple's Files app to prevent accidental user deletion).
- We have no access to your iCloud account or any data stored within it.
4. Application Diagnostics
Onyx Vault collects basic, anonymized usage telemetry (such as Firebase Analytics screen views and event logs like item creation count or sync success flags) to help us maintain and improve app performance.
- No Personal Identifiers: These diagnostic reports contain absolutely no account details, service names, plain codes, or identifiable personal data.
5. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of the policy.
6. Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at the help center or via the support form on our website.