Privacy Policy

• a) Account: email, name from Apple/Google OAuth, user ID.
• b) User Content: photos, videos, object crops, receipts, inventory item names, descriptions, values, quantities, rooms, purchase dates, warranties, walk-through videos, vault proofs. Stored in private storage buckets (vault-proofs, object-crops, inventory-videos, receipts, walks) with signed URL access.
• c) Usage: app interactions, scan counts, item limits, export events.
• d) Payments: RevenueCat CustomerInfo, entitlement status (pro), transaction IDs. We do NOT store full card numbers. Payments processed by RevenueCat, Stripe, Apple App Store, Google Play.
• e) Device: device type, OS, IP, browser.

To provide inventory management, calculate total value, generate insurance claims, provide backups, process subscriptions, support, security via Row Level Security (RLS) and owner_id checks.

Lovable Cloud (Supabase) for hosting/database/storage, Google Cloud for OAuth, Apple for Sign in with Apple, RevenueCat for subscriptions, Stripe for web payments, Apple/Google for IAP.

We do not sell personal data. Only share with service providers above as needed to operate.

Data retained until you delete account. Delete Account in Settings > Delete Account permanently deletes all storage objects and database rows via edge function, then deletes auth user. Email privacy@vaultwalk.app for manual deletion.

Private buckets (no public access), RLS policies restricting all queries to auth.uid() = owner_id, signed URLs with 1-hour expiry, owner_id auto-set on client and validated on server.

Access, correction, deletion, export (claim export feature). California residents CCPA, EU residents GDPR rights. Contact privacy@vaultwalk.app.

Not for under 13.

We will update this policy and post new date.