Privacy Policy for Kypo Secure Vault
At Kypo Secure Vault ("Kypo"), we take your privacy seriously. This Privacy Policy describes how we collect, use, process, and share your information when you use the Kypo Secure Vault application ("Service"), operated by Tasso Software Studio ("us", "we", or "our").
1. Information We Collect
- Account Data: Email, display name, and authentication tokens (e.g. Google Sign-In profile data).
- Vault Content: Notes, finance entries, tasks, shopping items, calendars, and attachments. This data is encrypted on your device and stored in encrypted form. We do not read your Content. The one exception is the optional account recovery described in section 4.
- Usage Data: Feature usage, session metadata, device type, OS version, and anonymized crash reports where enabled. We also store, per account, the time you were last active, your platform (Android, iOS or web), app version and build, and language, and we compute aggregate statistics from these nightly to run and improve the Service.
- Notification Data: Your device's push-notification token, so we can notify you when someone changes something in a space you share. Notification text names the person and the kind of item (for example "a task"), never the item's encrypted title. If a task or event is assigned to you, the assignment is stored in a form our servers can read so the assignee can be notified.
2. Use of Information
- Secure storage and synchronization across your devices.
- Facilitating sharing in Family Vaults and Group Spaces.
- Maintaining and improving the Service.
- Service-related communication and support.
- Security and fraud prevention.
3. Sharing of Information
We do not sell your personal information. We share information only with designated vault members (for shared spaces), infrastructure providers (e.g. Firebase) under strict processing limits, or when required by law. We cannot provide decrypted Content in response to legal requests, other than through the recovery mechanism in section 4, which we only run for the account holder.
3a. Operator Access
A small number of Kypo operators use an administration console. It shows account details (email address, plan, platform, last activity, and which family or group spaces you belong to) and lets operators grant ad-free access, send announcements, and delete accounts or spaces when needed, for example on your request or to remove an empty space. Operators cannot see your encrypted Content. We keep an audit log of operator actions (who did what, to which account, and when). Audit entries are kept for security and accountability and may remain after an account is deleted; they contain account identifiers and the reason given, not your Content.
4. Data Security
We use industry-standard encryption (such as AES-256) for Content at rest and in transit. Your Content is protected by a key that only you control.
Account recovery. If you set up recovery, an encrypted recovery copy of your key is stored with us. It can only be opened by a protected platform recovery key, which is kept in a managed secret store and used only by an automated process, and only when you request recovery and prove control of your email address with a one-time code. Our staff do not browse or use these copies. If you do not set up recovery, or you lose both your key and access to your email, we cannot recover your data.
5. Data Retention and Deletion
We retain data while your account is active. You may permanently delete your account and associated data at any time using our account deletion portal. Deletion is processed automatically and cannot be undone. If a deletion fails, we retry it until it completes. When you delete your account: your personal space, your files and your profile are erased; a family or group space you own is passed to its longest-standing member, or deleted if you were its only member; and items you added to spaces you share remain in those spaces for the other members. An operator may also delete an account on your request, and may delete family or group spaces that have no members left.
6. Advertising and In-App Purchases
If you are not on an entitled ad-free plan, the Android app may show Google AdMob native ads in list feeds (finance, shopping, notes, tasks, and calendar). AdMob and its partners may collect advertising identifiers, coarse device and app activity, and interaction data to deliver and measure ads. Vault Content is not sent to AdMob. Ads are suppressed while isAdFreeUser is true and subscriptionExpiresAt is unset or still in the future, including after you cancel auto-renew until that expiry.
Paid features are processed by Google Play Billing, not by Kypo card forms. The subscription product is kypo_ad_free with base plans monthly (ad-free-monthly-auto) and yearly (ad-free-yearly). The one-time consumable extra_family_slot adds a family-vault member slot. Google processes the payment, tax, and receipt. We store entitlement fields on your account (tier, ad-free flag, auto-renew state, and expiry) so the app can honor the paid period.
Publisher disclosure for ads.txt / app-ads.txt: Google AdMob publisher pub-2591630622947060. See /app-ads.txt.
7. Your Rights
Depending on your location, you may access, correct, delete, or export your data. Contact us for complex requests.
8. Children's Privacy
Family Vault features may involve minors. Parents or guardians should contact us if a child provided information without consent.
9. Changes to This Privacy Policy
We may update this Policy and will post changes here with an updated date. Significant changes may be announced in the Service or by email.
10. Contact Us
Questions: support@kypo.app