Privacy Policy

1. Overview

FlumenVault is a privacy focused vault application for iPhone. It allows users to organize, store, manage, back up, and restore personal files, photos, documents, cards, and vault related metadata.

Wherever possible, data remains on your device or in cloud storage accounts that you choose and control.

2. Data controller and contact

The provider of FlumenVault can be reached at support@flumenvault.com. Full provider information is available in the Imprint.

3. Information processed by the app

FlumenVault may process information that you choose to add to the app, including:

• Photos and videos
• Documents and files
• Cards, IDs, travel documents, and other personal items
• Vault names, folder names, categories, and file metadata
• Backup metadata such as vault name, backup date, item count, and storage provider
• App settings and local configuration values

This information is used to provide the app features requested by you.

4. No AI

FlumenVault uses no artificial intelligence. Nothing in the app analyses, classifies or interprets your files, and nothing is sent anywhere to be analysed. It is a vault, and a vault that reads what is in it is not one.

5. Where your data is stored

On your device

Files and metadata may be stored locally on your device inside the app storage area.

iCloud

If you enable iCloud backup, backup files may be stored in your personal iCloud account.

Microsoft OneDrive

If you enable OneDrive backup, backup files may be stored, after you authorize it, in a folder of FlumenVault's own in your OneDrive.

Google Drive

If you enable Google Drive backup, backup files may be stored in your Google Drive account after you authorize it.

Cloud providers process data according to their own terms and privacy policies. FlumenVault does not control these third party storage providers.

Our own servers

This website runs at a cloud provider that operates it as a processor on our instructions and does not decide what happens to your data. The data centres are in the EU or in the USA. A transfer to the USA is based on the European Commission's adequacy decision (the EU-US Data Privacy Framework) or on its Standard Contractual Clauses.

No vault contents are stored there. They stay on your device — and, if you enable backup, in your own cloud account as described above. For that the app talks directly to Apple, Microsoft and Google, not to us.

6. Your account

FlumenVault needs no account with us. If you connect OneDrive or Google Drive, you sign in there - with Microsoft or Google, not with us.

7. Google user data

Where you connect Google Drive for backups, FlumenVault receives data from Google APIs. This section is the disclosure Google's API Services User Data Policy requires.

What is accessed. Only the files this app itself creates in your Drive. FlumenVault asks for drive.file, which gives it no view of the rest of your Drive.

How it is used. Only for the backups you turn on. Nothing else.

Who it is shared with. Nobody. It is not passed to third parties, not sold, and not combined with data from other sources.

How it is protected. It is kept only on your device, with the access tokens in the iOS keychain, and travels over TLS.

How long it is kept. Until you disconnect Google in the app. You revoke the grant at Google itself at myaccount.google.com/permissions.

Limited Use

FlumenVault's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is not used for:

• targeted advertising, or building advertising profiles
• selling or transferring to data brokers, information resellers, or any third party
• determining creditworthiness, or lending purposes
• training or improving generalized AI or machine learning models

8. Microsoft user data

Where you connect OneDrive for backups, FlumenVault receives data through the Microsoft identity platform (Entra ID).

What is accessed. Your name, your e-mail address and an identifier Microsoft assigns to the account (User.Read), and a folder of FlumenVault's own in your OneDrive (Files.ReadWrite.AppFolder). The app sees nothing else in your OneDrive. So that backups can run without signing in again, it requests offline_access.

How it is used. Only for the backups you turn on. Not for advertising and not for training AI.

How it is protected. It is kept only on your device, with the access tokens in the iOS keychain, and travels over TLS.

How long it is kept. Until you disconnect Microsoft in the app. You revoke the grant at Microsoft itself at account.live.com/consent/Manage, or for work and school accounts at myapplications.microsoft.com.

9. What we do not do

• No advertising and no advertising SDKs.
• No tracking across other apps or websites.
• No analytics or diagnostics services. If any are added, this page says so before they run in a production release.

And for this website in particular — checkable rather than general:

• No Google Analytics, no Tag Manager, no Matomo, no Facebook pixel.
• No fonts, scripts or images from other servers. The page loads nothing from elsewhere.
• No cookies, and therefore no consent banner.
• No forms. Contact goes through the address above.

10. Support

If you contact support, we process what you send us: your email address, the text, screenshots, optional attachments, device details, the app version and diagnostic information. It is used only to answer your request and to find bugs.

11. Deletion

Your content is on your device and in your own cloud accounts. You see, change and delete it there yourself - we have no access to it.

You can delete files, folders, vault contents, backups, and app data through the app or through your device and cloud provider settings. Removing the app may delete local app data from the device. Backups stored in your own cloud accounts must be deleted there separately.