Privacy

As of 23 October 2026. Vaulix is the photo vault from DAWIconsulting. This notice covers the app and this website.

Files in the vault

Photos, documents, the PIN, and the 24 recovery words stay on the device until you turn cloud backup on. Without an account, no server receives the vault. With an account, the app uploads only encrypted bytes, plus the email address and a public key. The PIN, the words, and the master key are not sent in the clear. We cannot open the files. A shared file and emergency access are encrypted again for the other person. Emergency access is released after 7 days unless you cancel it.

This website

The site does not set analytics cookies.

Waitlist: If you sign up, DAWIconsulting stores your email address, the language, the time of your consent and a non-reversible hash of your IP address on a server in Germany (Hetzner). We use this to tell you when Vaulix launches. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by email to kontakt@dawi.consulting. We keep the data until Vaulix launches and we have told you, or until you withdraw, whichever comes first. Then we delete it.

Support form: If you contact us through the form, we store your email address, subject, message, the optional app version and platform, the language and a non-reversible hash of your IP address on the same server in Germany. We use this to answer your request (Art. 6(1)(b) GDPR where it concerns a contract, otherwise Art. 6(1)(f), our legitimate interest in answering). We send replies by email through Resend as a processor. We delete the request once it is closed, at the latest within a reasonable period afterwards, unless statutory retention duties apply.

Permissions in the app

The photo library is used for import. If you ask, Vaulix counts how many photos already carry GPS data. The coordinates are not shown and not stored. That count does not read the device location.

The place lock is optional. It remembers one place on the device and locks the vault when you come back there. The place is not sent anywhere.

The camera captures into the vault. Those photos do not go to the gallery. If the break-in photo is on, the front camera takes a photo after a wrong PIN and puts it in the vault.

Biometrics are optional. A copy of the key can sit in the keystore of this device. The PIN remains the way in when that copy is missing.

Purchases

Mini and Tresor are bought through the App Store or Google Play. RevenueCat checks which plan is active. We do not see card details. The last confirmed plan stays stored on the device so a failed refresh does not drop a paid plan back to free.

Ads

Ads appear only on the free plan, under the file list, never on an open file. They are not personalized. Google’s consent form appears before the first ad. The app does not ask for the advertising identifier. Google can process technical data for an ad request, such as an IP address.

Contact

Questions about this notice: kontakt@dawi.consulting.

This notice should be reviewed before the app is submitted to the stores. It describes the app as of 23 October 2026.