Summary: Vaultly has no account and no first-party analytics, and MW Supply Limited runs no servers that receive your media. Your photos and videos are encrypted on your device with AES-256 and stay there (and, if you turn on iCloud sync, in your own end-to-end-encrypted iCloud). The free version shows a single banner ad through Google AdMob and asks App Tracking Transparency permission before using an advertising identifier.
Vaultly has no account system, no login to us, and no first-party analytics, and MW Supply Limited operates no servers that receive your data. Your photos and videos are stored encrypted in the app's own storage and are not uploaded to us. The only data processing beyond your own device is done by the advertising provider on the free version, described in section 5.
Every photo and video you add is encrypted on your device using AES-256-GCM before it is written to storage. The encryption key is generated on your device and stored in the iOS Keychain; it is never sent to us. The vault is kept out of unencrypted device backups, and the whole app is gated by Face ID (or your device passcode) with content hidden in the app switcher. Face ID controls access to the app; encryption protects the files themselves, on disk and when synced.
You bring media in by choosing it from the Files app or your Photos library; Vaultly copies each selected item into its encrypted vault. When you import from Photos, access is limited to the items you pick — Vaultly does not read the rest of your photo library. You can export a decrypted copy of any item to Apple Photos or the Files app, or share it through the system share sheet; Photos access is requested as add-only by default. No media is ever sent to MW Supply Limited.
If you enable iCloud sync (a Pro feature), Vaultly syncs your vault across your own devices signed in to the same Apple ID using your private iCloud (CloudKit) database. Media is encrypted on your device before it is uploaded, and the encryption key rides Apple's end-to-end-encrypted iCloud Keychain — so iCloud stores only ciphertext and neither Apple nor MW Supply Limited can read your media. This data lives in your own iCloud account, is governed by Apple's privacy policy, and is not accessible to us. You can turn iCloud sync off any time in the app's Settings.
The free version of Vaultly shows a single banner advertisement provided by Google AdMob. If you subscribe to Vaultly Pro, the app shows no ads at all and the AdMob SDK is not started. Ads are never shown over your photos, videos, the editor, or the lock screen — only as a small strip on the main library.
Vaultly Pro is an auto-renewable subscription sold through Apple's In-App Purchase using StoreKit. Your purchase, payment, and renewals are handled entirely by Apple under your Apple Account; MW Supply Limited never sees your name, your Apple ID, or your card or payment details. Subscriptions can be managed or cancelled any time in your Apple Account settings.
Vaultly is a personal vault for media you already have on your device. You are responsible for ensuring you have the right to store the photos and videos you import, in accordance with applicable law.
Vaultly is not directed to children under 13. The free version uses Google AdMob with age-appropriate ad settings where required, and the app collects no personal data itself, consistent with the Children's Online Privacy Protection Act (COPPA) and similar regulations worldwide.
If we change how Vaultly handles data, we will update this page and the “Last updated” date above. Material changes will also be reflected in the App Store privacy labels for the affected version of the app.
Questions about this privacy policy can be sent to mwsupplylimited@gmail.com.