Privacy Policy

1. Introduction

This Privacy Policy explains how TravelVault (“the App”), published by Elsoati (“we”, “us”, “our”), handles information when you use the App. TravelVault is an offline-first, local-only application: your travel documents, trip details, and other content are stored on your device and are not uploaded to servers operated by us. This policy is written as a compliance-oriented baseline in line with the EU General Data Protection Regulation (GDPR); it is not a substitute for legal advice.

2. Who is responsible for your data

For any personal data processed as described in Section 3, the data controller is Elsoati, publisher of the App (package identifier: hu.travelvault). You can contact us at travelvault2026@gmail.com with any privacy question or request.

3. What data the App processes, and where it is stored

TravelVault does not require you to create an account and does not operate a cloud backend for your trip or document data. All trips, documents, images, filenames, notes, traveler names and settings you enter are stored exclusively in the App’s private storage area on your device, in local databases and files that only TravelVault can access, subject to your device’s operating-system security. We do not transmit, sync, or back up this content to our own servers. TravelVault itself disables Android’s automatic app-data backup by default; if your device has its own manufacturer or OS-level cloud backup enabled, that backup is controlled by you and by that third-party service, not by us.

Summary: offline / local-only storage · no user account · no advertising · no analytics SDKs operated by us.

4. Permissions the App may request, and why

• Camera: lets you photograph or scan a document directly into a trip. Photos are saved only inside the App’s own storage.
• Storage / file access (system file picker, or “Share” from other apps): lets you import existing PDFs, images or files into a trip, and export or share documents you choose.
• Notifications: reminds you before a saved document’s expiry date, if you enable expiry reminders. Reminder data (which documents, which dates) stays on your device.
• Biometric / device-credential prompt: if you enable the optional app lock, TravelVault asks the Android operating system to verify your fingerprint, face, or device PIN/pattern/password before showing your data. TravelVault never receives or stores your biometric data — that is handled entirely by Android’s biometric APIs and your device’s secure hardware.

Each permission is optional and only used for the specific feature it supports; declining a permission simply disables that feature.

5. Subscriptions and payment data (Google Play Billing)

TravelVault offers an optional paid subscription for expanded limits, purchased through Google Play Billing. Your purchase is processed entirely by Google; TravelVault never receives, sees or stores your payment card, bank or other financial details. We only receive a purchase/entitlement confirmation from Google Play Billing, which we store locally on your device to unlock premium features. Google acts as an independent controller/processor for your Google Play account and billing information — see Google’s own Privacy Policy for details.

6. Sharing your data with others

Sharing a document or trip out of TravelVault (for example via the Android “Share” menu to email, messaging, or another app) is always an action you initiate yourself, and it is your choice which app or contact receives it; TravelVault never sends your data anywhere automatically. We do not sell, rent or trade your personal data. Other than Google (for billing, see Section 5), we do not share your data with any third party, and we do not use advertising or analytics SDKs that track you.

7. Data retention and deletion

Your trips and documents remain on your device for as long as you keep them in the App, or until you uninstall it. You can delete individual documents or entire trips at any time from within TravelVault. Uninstalling the App, or clearing its storage/data from your device’s system settings, permanently deletes all remaining App data from that device. Because we do not hold a copy of your data on any server, we cannot recover it for you after local deletion — keep your own backups (for example by sharing/exporting important documents) if you want a copy outside the App.

8. Your rights under the GDPR

Because your personal data lives on your own device rather than on our servers, you can exercise most GDPR rights directly and immediately:

• Access and portability: open the App to view everything you have stored, or use the built-in Share/Export (ZIP) feature to obtain a copy.
• Rectification: edit any trip, document or traveler entry directly in the App.
• Erasure (“right to be forgotten”): delete individual items in-app, or uninstall the App / clear its data to erase everything at once.
• Restriction and objection: since the App does not process your data for profiling, marketing or automated decision-making, these rights are satisfied by the access/erasure controls above.

For anything not resolvable on-device — for example a question about your Google Play purchase history, or a general privacy inquiry — contact us at travelvault2026@gmail.com. You may also lodge a complaint with your local data protection supervisory authority (in Hungary: the Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH).

9. Children’s privacy

TravelVault is not directed at children under the age of 16, and we do not knowingly collect personal data from children. Because the App does not send us data at all (it is stored locally), this is primarily relevant to Google Play Billing, which is subject to Google’s own age requirements.

10. International data transfers

We do not transfer your personal data internationally, because we do not receive or store it in the first place. Where Google Play Billing processes payment-related data on our behalf, any international transfer of that data is governed by Google’s own privacy and data-processing terms.

11. Security

Your data benefits from the security of your device and the Android operating system’s app sandboxing, which prevents other apps from directly reading TravelVault’s private storage. Enabling the optional biometric/device-credential app lock in Settings adds an extra step before your data is shown. We also recommend enabling your device’s own screen lock and storage encryption, since TravelVault relies on your device’s built-in protections rather than implementing a separate encryption layer of its own.

12. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect new features or legal requirements. When we publish an update, we will revise the “Last updated” date at the top of this page. Continuing to use TravelVault after an update means you accept the revised policy. The in-app version of this policy remains available under Settings → About.

13. Governing law and contact

This policy is governed by the laws of Hungary and, where applicable, European Union law. For any question, request or complaint, contact Elsoati at travelvault2026@gmail.com (English or Hungarian).