Privacy Policy

CloudEx Inc. ("we", "us", or "our") operates the "Secret Vault Pro" app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. By using the Service, you are deemed to have agreed to the practices described in this Policy.

1. Our Core Principle

Secret Vault Pro looks and works like an ordinary calculator, and entering your password on its keypad opens a private vault where you can hide photos, videos, audio, and other files. Everything you put into the vault is encrypted and kept on your device only. Hidden files are never uploaded to us or to anyone else, and no account or sign-in is required to use the Service.

We cannot see inside your vault. We never receive, store, or transmit any of the following:

• The files you hide, their file names, or their thumbnails
• Your password, your decoy password, your security answer, or your recovery code
• The notes, contacts, bookmarks, or browsing history you keep inside the vault
• Photos taken with the in-app camera, voice recordings, or break-in photos

2. Your Password, Your Key, and Your Recovery Code

Encryption in Secret Vault Pro is designed so that only the person holding the device can open the vault. That design has a consequence you should understand before you rely on it:

• Your password (and your decoy password and the answer to your security question) is stored only as a one-way verifier (PBKDF2) on your device. The password itself is stored nowhere and cannot be read back — not by us, and not by anyone who can read the device's files.
• Files in the vault are encrypted with AES-256. The encryption key is protected by the Android KeyStore on your device and, if you choose, by your biometric authentication.
• Because the key lives on your device, uninstalling the app or clearing its data destroys it. The recovery code shown to you when the vault is created is what brings the vault back, and it is also what opens a backup file you exported.

3. Information We Collect

3.1 Information Collected Automatically

• Anonymous crash reports: Via Firebase Crashlytics. When the app crashes, we collect the stack trace, device model, OS version, and app version. This does not include personally identifiable information, your file names, or anything stored in the vault.
• App usage statistics: Via Google Analytics for Firebase. We collect anonymous app usage events (such as the app being opened for the first time) together with device information and the device's advertising ID (AAID). We use this data to understand aggregate app usage and to measure the effectiveness of our own advertising campaigns (counting app installs that resulted from an ad). These events describe how the app itself is used; they never contain the names or contents of the files you hide. This data is never used to display ads in the app.
• Purchase / license information: Purchases are processed by Google Play. The app checks the purchase state issued by Google Play in order to confirm your license. We never receive payment information such as credit card numbers.

3.2 Information Stored Only on Your Device

• Vault contents: Files you hide are encrypted and stored in a hidden folder on your device's own storage. Hiding a file encrypts it into that folder and deletes the original; restoring it writes a decrypted copy back out to your device.
• Notes, contacts, bookmarks, and browsing history created inside the vault: Stored encrypted in the app's private database on your device. The "contacts" feature keeps entries you type in yourself — the app does not read your device's own contact list.
• Break-in photos: This feature is off by default. If you turn it on, a photo is taken with the front camera after a set number of wrong password entries and stored encrypted in the vault so you can review it later. It is never transmitted.
• App settings: Theme, auto-lock and panic-gesture settings, the destination folder for the camera and the voice recorder, and the like.

Uninstalling the app or clearing its data erases the app's private data and settings. The encrypted vault folder on your device's shared storage is not removed by uninstalling — that is deliberate, so a reinstall plus your recovery code can bring the vault back. Delete the vault from within the app, or delete the folder yourself, if you want it gone. Android's automatic backup is disabled for this app, so none of the above is copied to your Google account.

3.3 Information We Explicitly Do Not Collect

• The files you hide, their names, or their contents
• Your password, decoy password, security answer, or recovery code
• Your device's contacts, call log, SMS, or calendar
• Location information such as GPS coordinates
• The pages you visit in the in-app browser

3.4 Permissions the App Requests and Their Purposes

Secret Vault Pro uses the following permissions only for the stated purposes:

• All files access (MANAGE_EXTERNAL_STORAGE) — Required. Hiding a file means encrypting it into the vault folder on shared storage and deleting the original, and restoring it means writing it back out; both need access to files outside the app's own area. The vault is placed on shared storage rather than inside the app so that it survives an uninstall and can be recovered with your recovery code. The app reads only the files you select and its own vault folder, and it never uploads them.
• Camera (CAMERA) — Used only for the in-app camera, which encrypts each photo directly into the vault so that no unencrypted photo is ever written to disk, and — if you turn the feature on — for the break-in photo after repeated wrong passwords. Both stay on your device.
• Microphone (RECORD_AUDIO) and a foreground service — Used only for the in-app voice recorder. The foreground service exists so that a recording keeps running when the screen turns off; its notification uses neutral wording and names neither the app nor the vault. Recordings are encrypted into the vault.
• Biometric authentication — Optional, for unlocking the vault with your fingerprint or face. Biometric data is handled entirely by Android; the app never receives or stores it.
• Internet and network state — Used to update the in-app browser's ad-filter list, load the list of our other apps, check for app updates on Google Play, send crash and analytics data as described above, and, in the free version, register the trial start date. It is never used to send anything from your vault.

3.5 A Note on File Names

The contents of hidden files are encrypted, but their file names and the names of folders you create inside the vault are stored as ordinary text on your device, so that the app can list them without decrypting anything. A file manager that shows hidden files could therefore read those names, though not the contents. The app provides a "randomize name" function for exactly this reason. The names are still never transmitted anywhere.

4. The In-App Browser

Secret Vault Pro includes a browser whose bookmarks and history are kept encrypted inside the vault instead of in your phone's normal browser.

• Pages you visit are loaded directly from the sites concerned, exactly as in any other browser. We do not operate a proxy and we never see the addresses you visit.
• The browser filters advertising and tracking domains using a domain list that your device downloads from our distribution server about once a day. Only the list is downloaded; the addresses you visit are never sent to us or to anyone else.
• Cookies and site data created while browsing are stored on your device and can be cleared from the browser menu.
• Files and images you save from the browser are encrypted into the vault.

5. Backups You Create

The app can export your whole vault as a single file. You choose where it is written using Android's own file picker; the app never sends it to us. If you choose a cloud destination such as Google Drive, that provider's privacy policy applies to the copy stored there. The exported file stays encrypted and can only be opened with your recovery code.

6. How We Use Information

The limited information we collect is used only for the following purposes:

• Operating and maintaining the Service
• Verifying purchases
• Understanding aggregate app usage and improving the app (analytics)
• Measuring the effectiveness of our own advertising campaigns (install conversion measurement)
• Diagnosing and fixing crashes
• Responding to support inquiries
• Complying with applicable laws

7. Third-Party Services

Secret Vault Pro uses the following third-party services. Each service has its own privacy policy.

• Firebase Crashlytics (Google LLC) — anonymous crash diagnostic data
• Google Analytics for Firebase (Google LLC) — anonymous app usage statistics and measurement of our own ad campaigns (install conversions)
• Google Play (Google LLC) — billing, app updates, and the in-app review prompt; payments are completed on the store platform side
• Cloudflare Pages (Cloudflare, Inc.) — hosting of the ad-filter domain list that the in-app browser downloads. Your device downloads the list; no information about your browsing is sent.
• CloudEx Inc. (our own web server) — hosting of the list of our other apps shown in the app. Requesting it sends nothing but the ordinary information contained in any web request.

Secret Vault Pro does not display ads within the app and does not share your data with advertising networks in order to show you ads.

8. Data Retention

• Crash reports: retained for 90 days, then deleted.
• Analytics data: retained by Google Analytics for up to 14 months, then deleted.
• Data on your device: the app's private data and settings are erased when you uninstall the app or clear its data. The encrypted vault folder on shared storage remains until you delete it (see Section 3.2).

9. International Data Transfers

We are based in Japan. The infrastructure used for crash diagnostics and analytics may be located in various countries. When you use the Service, the minimal information described above may be processed outside your country of residence under standard contractual safeguards. The contents of your vault are not transferred anywhere.

10. Your Rights

Depending on where you reside (e.g., the EEA, UK, California, Japan), you may have the right to request access to, correction of, or deletion of the limited information we hold. You can:

• Reset or delete your device's advertising ID in your device settings (Settings → Google → Ads)
• Uninstall the app or clear its data to erase the app's data on your device, and delete the vault folder to erase the encrypted files
• Contact us at the address below to make a request regarding the information we hold

11. Children's Privacy

Secret Vault Pro is not directed to children under the age of 13 (or the minimum age applicable in your region). If we inadvertently collect information from such a child, we will delete it promptly upon being contacted.

12. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version is always published at this URL together with its effective date. We will also notify you within the app of significant changes as appropriate.

13. Contact

For questions about privacy, data requests, or to report concerns, please email us at .

CloudEx Inc. (Japan)

Effective Date: August 4, 2026