Privacy Policy

LocalVault is built so that we cannot see your finances. Every asset, liability, and subscription record you enter is encrypted with AES-GCM under your master password and stored only in your browser's IndexedDB. Your vault data is never uploaded, synced, or transmitted to our servers — there is no database on our side that holds it.

The only personal information we process is what sign-in requires. When you sign in with Google, we receive your email address, display name, and profile image from Google. These are used to establish your session and display your account. We also store your subscription status (free or Pro) if you purchase a plan.

We do not collect your master password, your vault contents, or any analytics, fingerprints, or tracking data about your browsing.

Your encrypted vault resides in your browser's local storage. You can delete it at any time by clearing site data in your browser settings — this permanently erases your records from that device, and we retain no copy.

Two third parties are involved in operating the service, each governed by their own privacy policy:

Google — provides sign-in. When you authenticate, Google shares your email address, name, and profile image with us. See Google's Privacy Policy.

Creem — processes payments for the Pro plan. Your payment details go directly to Creem; we only receive your subscription status. See Creem's Privacy Policy.

We set a single session cookie so you stay signed in. It contains no personal data beyond an opaque session identifier and expires when you sign out or after a period of inactivity. We use no advertising, analytics, or tracking cookies.

Your account record (email, name, image, subscription status) is kept while your account is active. Sign out does not delete it; contact us at support@localvault.app if you would like your account record removed. Your vault data is under your exclusive control on your device and is deleted by clearing your browser's site data.

If this policy changes, we will update the "Last updated" date above. Changes take effect when the revised policy is published.

If you have any questions about this policy or how your data is handled, you can reach us at support@localvault.app.