Your Documents. Your Control.

This Privacy Policy applies to the Vaultar mobile application for Android, developed and published by MJrFusion ("we," "us," "our"). It covers all information processed by the Application on your device and any limited data transmitted to third-party service providers as described herein.

The Application is designed with a local-first architecture: your documents, metadata, collections, and settings are stored exclusively in local storage on your device. We do not operate cloud infrastructure for document storage, synchronization, or backup.

By installing or using the Application, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, you must not install or use the Application.

The Application processes the following categories of information locally on your device:

All information listed above remains on your device unless you explicitly initiate an action to export, share, or transmit it through Android's system interfaces. We have no access to this data.

The Application requests the following Android permissions and uses the following system interfaces solely to enable documented functionality:

The Application only accesses content that you explicitly select through Android's system pickers (document picker, image picker, camera intent, share sheet). No background scanning, indexing, or uploading of your files occurs.

The Application stores documents in two distinct local storage modes, both fully on your device:

In both modes, the Application does not upload, synchronize, or backup your documents to any server operated by MJrFusion. No cloud infrastructure is used for document storage.

Document transfer occurs only when you explicitly use Android's share sheet, file provider, or export functionality. At that point, the data leaves the Application's control and becomes subject to the privacy practices of the destination app or service.

Uninstalling the Application may result in deletion of data stored in Internal Private Storage, depending on your device manufacturer's implementation of Android's app data management. Documents saved to MediaStore/user-selected locations persist after uninstall. We recommend exporting important documents before uninstalling.

The Application offers optional local authentication using a numeric PIN and/or biometric credentials (fingerprint, face recognition) via Android's BiometricPrompt API.

PIN credentials are hashed using BCrypt (with migration to PBKDF2-HMAC-SHA256) and stored in EncryptedSharedPreferences. Biometric keys are managed by the Android Keystore system and never leave the device's Trusted Execution Environment (TEE).

MJrFusion does not have access to your PIN, biometric templates, or authentication keys. Authentication occurs entirely on your device. We cannot reset or recover your PIN.

The Application allows you to share or export documents through Android's standard intent system (ACTION_SEND, ACTION_SEND_MULTIPLE, file provider). You retain full control over which documents are shared and with which applications.

Once a document is shared, its subsequent processing is governed by the privacy policy and terms of the recipient application or service. MJrFusion is not responsible for how third-party applications handle your data after export.

The Application does not automatically share, publish, or distribute your documents to any third party, including MJrFusion.

• The Application performs the following image processing operations locally on your device:
• (a)Perspective correction, rotation, and cropping of scanned pages;
• (b)Image compression (JPEG) and PDF generation using PDFBox Android;
• (c)Optional Optical Character Recognition (OCR) via Google ML Kit Text Recognition (Premium feature only).

When OCR is enabled, text recognition runs entirely on-device using Google ML Kit's on-device API. No images, document content, or extracted text are transmitted to Google or any other party. The OCR results are stored locally as part of the document metadata.

All image processing and OCR operations are performed for the sole purpose of document management functionality. They are not used for profiling, analytics, advertising, or any other secondary purpose.

The free version of the Application displays advertisements served by Google AdMob and related Google advertising services. Ad formats may include interstitial ads, banner ads, and rewarded ads.

Google's advertising services may access the Android Advertising ID (AAID) and other identifiers to deliver personalized ads, subject to your device's ad personalization settings (Settings > Google > Ads). MJrFusion does not control Google's advertising practices.

Information collected through advertising services is governed by Google's Privacy Policy (https://policies.google.com/privacy) and Google's Advertising Policies. You may opt out of personalized ads via Android's settings or by installing the Google Settings app.

The Application does not use document content, metadata, or User Content for advertising targeting, profiling, or measurement. Advertising is the sole monetization mechanism in the free version; no subscription or recurring charges apply.

The Application integrates the following third-party services, each of which operates under its own privacy policy. We do not share your documents or personal content with these providers.

Data transmitted to these providers is limited to technical identifiers (instance IDs, advertising IDs), device information (OS version, device model), and anonymized event data. You may limit data sharing by disabling ad personalization, analytics collection, or crash reporting in your device settings.

Documents and data stored by the Application remain on your device until you delete them. There is no automatic expiration or server-side retention.

You may delete individual documents, entire collections, or all Application data at any time through the Application's interface or by clearing app data in Android Settings.

Analytics and crash data transmitted to Firebase are retained according to Google's data retention policies (typically 14 months for Analytics, 90 days for Crashlytics). You cannot request deletion of this aggregated, non-personal data from MJrFusion.

The Application is not directed to children under the age of 13 (or the minimum age for data processing consent in their jurisdiction, e.g., 16 in the EEA under GDPR).

We do not knowingly collect personal information from children. If a parent or guardian becomes aware that a child has provided personal information, they should contact us to request deletion.

Because the Application stores data locally and does not transmit personal identifiers, the risk of children's data collection is minimal. Parental controls for in-app purchases and advertising are managed through Google Play and Android settings.

• The Application implements the following technical and organizational measures to protect your data:
• (a)Local-only storage: no network transmission of documents or User Content;
• (b)EncryptedSharedPreferences for settings and PIN hashes;
• (c)Android Keystore for biometric key management;
• (d)BCrypt/PBKDF2-HMAC-SHA256 for PIN hashing with configurable iterations;
• (e)Application signature verification to prevent tampered builds from accessing Premium features;
• (f)ProGuard/R8 code obfuscation and minification in release builds;
• (g)Regular security updates via Google Play.

While we implement industry-standard protections, no security system is impenetrable. You are responsible for securing your device (screen lock, OS updates, trusted app sources) and your authentication credentials. MJrFusion is not liable for data exposure resulting from device compromise, malware, or credential disclosure.

• Depending on your jurisdiction, you may have the following rights regarding your personal data:
• (a)Right of access: you can view all data stored by the Application on your device;
• (b)Right to rectification: you can edit or correct document metadata within the Application;
• (c)Right to erasure: you can delete documents, collections, or all Application data at any time;
• (d)Right to data portability: you can export documents in standard formats (PDF, Office) via the share sheet;
• (e)Right to restriction: you can disable optional features (OCR, analytics, crash reporting, advertising ID) in settings;
• (f)Right to object: you can opt out of personalized advertising via Android's ad settings;
• (g)Right to withdraw consent: you can uninstall the Application, which removes local data.

Because the Application processes data locally and does not transmit personal identifiers to MJrFusion, many traditional data subject rights (e.g., access requests to a controller) are exercised directly by you on your device. For data processed by third-party providers (Google, Firebase), please consult their respective privacy policies and data subject request mechanisms.

The Application itself does not transfer your data across borders. However, third-party service providers (Google, Firebase) may process data on servers located in the United States and other countries.

Google's data processing for AdMob, Firebase Analytics, Crashlytics, and Remote Config is governed by Google's Data Processing Terms and Standard Contractual Clauses where applicable. You may review Google's privacy commitments at https://policies.google.com/privacy.

We may update this Privacy Policy from time to time to reflect changes in the Application, legal requirements, or third-party service practices.

Material changes will be communicated via the Application (in-app notice), the Google Play Store listing, or the official MJrFusion website, with the "Last updated" date revised accordingly.

Your continued use of the Application after the effective date of any changes constitutes acceptance of the revised Policy. If you disagree with the changes, you must cease using the Application and may request deletion of your local data.

• If you have questions, concerns, or requests regarding this Privacy Policy or your data, you may contact MJrFusion through:
• (a)The official Google Play Store listing for Vaultar (support contact link);
• (b)The official MJrFusion website contact channels;
• (c)The in-app support/contact section (if available).

We will respond to legitimate privacy inquiries within a reasonable timeframe. For data processed by third-party providers, you may need to contact them directly per their privacy policies.