Privacy Policy

Vaulta · Last updated 18 October 2026

Vaulta is a personal finance app. This policy describes exactly what it collects, what it never collects, and who it shares information with. It is written to describe the app as it actually behaves.

What Vaulta collects

• Account information — account names, types, balances and the last four digits of the account number, from institutions you choose to connect.
• Transactions — dates, amounts, merchant names and categories, so spending can be summarised without you typing it in.
• Credit and loan terms — interest rate, minimum payment and due date, used to build a payoff plan.
• What you enter yourself — budgets, goals, bills, notes, tags, manual transactions, and any investments, payment apps or shop accounts you log by hand. Vaulta does not pull these from any brokerage, wallet or exchange.
• Photos you scan — receipt and product photos you choose to scan. They are sent to Google (Gemini) to be read; see below.
• Your account details — the name and email address you sign up with.

What Vaulta never collects

• Your online banking username or password. Sign-in happens on your bank's own page, through Salt Edge. Vaulta never sees those credentials.
• Any ability to move, send, transfer or spend money. Connections are read-only.
• Your contacts, photo library, precise location or advertising identifiers.

Who your information is shared with

Only the providers needed to make a feature work, and only what that feature needs:

• Salt Edge Inc. — connects bank accounts in the countries where bank linking is offered, and returns your accounts and transactions. See Salt Edge's own privacy policy.
• Google (Gemini) — powers the AI advisor and reads scanned photos. The advisor receives a summary of your finances: totals, category splits, and merchant names with long digit runs stripped. Names of goals, bills and merchants that you typed yourself may appear in that summary. Receipt and product photos you scan are sent to Gemini to extract the details. Gemini never receives account numbers, account masks, institution names, your name or your email.
• eBay — when you look up what an item is worth, the item query you type or scan is sent to eBay to fetch current active-listing asking prices. No eBay account of yours is used and no personal data is sent with it.

Plaid is configured in the app but is not currently enabled, so no data goes to Plaid. If that changes, this policy will be updated first.

Vaulta does not sell your personal information, does not share it with advertisers or data brokers, and does not use it to build marketing profiles.

Where your information is stored

Your financial data is held on your device. If you turn on the app passcode it is encrypted at rest with AES-256-GCM using a key derived from your passcode; Vaulta cannot recover that data if you forget it. Access tokens for connected institutions are held on Vaulta's server and are never sent to the app.

Deleting your data

You can delete your account from Settings → Your account → Delete account. This erases your local data, the encrypted store, and your server-side records including any connection tokens. You can also disconnect a single institution at any time, after which Vaulta stops receiving anything from it.

Children

Vaulta is not directed at children under 13 and does not knowingly collect their information.

Your rights

You may request a copy of the data held about you, ask for it to be corrected, or ask for it to be erased, by writing to the address below. Depending on where you live you may also have the right to object to processing or to complain to a data protection authority.

Changes

If this policy changes in a way that affects how your information is used, the app will tell you before the change takes effect.

Contact

Questions about privacy: drbsiva@gmail.com