ProofVault is local-first. Recordings, hashes, notes and safety sessions are stored on your own device unless you sign in and explicitly tap “Back up now”. There are no ads, no advertising identifiers, and no third-party analytics or tracking.

Video and audio you record, their SHA-256 integrity hashes, capture time, optional location, device context (battery level, network type, browser user agent), trusted contacts you add, safety sessions, timeline events and notes. You can delete any of this at any time from the Vault or Settings.

Only if you create an account and start a backup. In that case we store your email address, your recordings and their metadata in a private storage area that only your account can open, plus your contacts, safety sessions and timeline events. You can delete cloud copies individually from the Account screen.

Live streaming is started manually by you and only from the Live screen, with a visible LIVE indicator for the whole session. While it runs, short clips and — if you enabled location sharing — your position are uploaded to your own private storage area. Only guardians who accepted your invitation can open the watch link. Pressing stop ends the capture immediately; nothing streams in the background or after you leave the screen.

The camera and microphone are used only while you are on the Record screen and have started a recording; a visible timer and indicator are shown for the whole capture. There is no hidden, silent, scheduled or remotely triggered recording.

Location is read only during an active safety session or SOS, and only when you have switched location sharing on for that session.

Safe-word listening and impact detection run entirely on your device and only while the Guardian screen is open and you have enabled them. Audio used for safe-word matching is never recorded, stored or transmitted.

You can turn on an app lock that opens as a calculator screen. This protects the evidence vault if someone else picks up your phone. It is a lock screen for the app’s own contents only: it does not hide the ProofVault app from your launcher or app list, does not disguise the app on the store, and does not record, listen or send anything by itself. You control it, and you can turn it off in Settings at any time.

If you also set a duress PIN, entering it unlocks the app normally and, at the same time, opens your phone’s messaging app with a pre-filled alert to the trusted contacts you added. The message is not sent until you send it. This action is recorded in your own timeline.

When you tap “Analyse” on an evidence item, the text details of that incident — title, timestamp, duration, tags, your notes and, if you added it, the location description — are sent to our AI processing provider to produce a summary and risk level. Your video and audio files are never sent to the AI provider. The provider processes the request to return a result and does not use it to train models. If you never tap Analyse, nothing is sent.

Cloud database, authentication and file storage: Supabase (infrastructure operated through Lovable Cloud). AI incident analysis: Lovable AI Gateway. Timestamp proofs: the public OpenTimestamps calendar servers, which receive only a SHA-256 hash — never the file, its name or any personal data. We use no advertising networks, no analytics SDKs and no tracking or advertising identifiers, and we never sell or rent personal data.

Data on your device stays until you delete it. Cloud copies stay until you delete them or delete your account. When you delete your account, everything is removed immediately; encrypted infrastructure backups roll off within 30 days and are never used to restore a deleted account.

You can delete your account and all associated data from Settings → Account → “Delete account and all data”, or by emailing privacy@proofvault.app. Full instructions are on our account deletion page.

ProofVault is not directed to children. The app is intended for people aged 16 and over and we do not knowingly collect data from children under 13. If you believe a child has created an account, email privacy@proofvault.app and we will delete it.

All network traffic uses TLS. Cloud files sit in a private storage area protected by row-level access rules so only your account — and, for live-stream clips, a guardian you personally invited and who accepted — can open them. Evidence packages you export can be protected with a password using AES-256-GCM encryption.

People you invite can see your safety check-in status, session state, timeline events and — if you enabled it — your shared location. They can never see your recordings. Access begins only after they accept the invitation and ends the moment you remove them.

ProofVault is for the device owner’s own safety. It cannot be installed covertly or silently, it always appears in your launcher and app list under its own name, and it cannot be configured to monitor, track or record another person. The optional app lock described above protects your own data on your own device; it is not a way to hide the app from the device owner.

You can export all of your data as a JSON manifest or legal ZIP package, delete individual items, delete all cloud copies, and delete your account. Contact the app owner using the address published on the store listing for any privacy request.

Recording laws differ by country and state. You are responsible for ensuring your recording is lawful where you are. ProofVault does not provide legal advice and does not replace emergency services.