Privacy Policy

VaultMind is a private, AI-powered digital vault operated by BiggerMind Group. People trust VaultMind with their most important documents, so privacy is not a feature of the product — it is the product. This policy explains what information VaultMind handles, where it lives, and the control you keep over it.

In short: VaultMind is local-first. Your documents, notes, and records are stored on your device, not on our servers. We do not sell your data, we do not mine your documents for advertising, and we design every feature to keep as much as possible on your hardware, in your hands.

Understanding where your information lives is the most important part of this policy:

• On your device — your documents, files, identity records, private notes, expiry dates, family profiles, and the organisation around them are stored locally on your device. They are not uploaded to our servers.
• Your account (Supabase) — we use a secure authentication service to manage your account sign-in, essentially your email address and authentication details, so you can create an account and log back in.
• Optional encrypted backup — if you turn on backup, VaultMind encrypts your vault on your device first, then lets you keep that encrypted backup in your own iCloud or Files, and can hold an encrypted copy so you can restore on a new device. Backups contain encrypted data only, protected by a recovery phrase that only you hold — so they cannot be read by us or anyone else.

• Account information — your email address and authentication details, used only to sign you in.
• Vault contents (on your device) — documents, identity records, private notes, expiry dates, and family profiles you add. These stay on your device unless you choose to create an encrypted backup.
• AI processing content — when you use AI features, the relevant document content is sent securely to our AI provider to process your request (see section 5).
• Technical data — device type, app version, and diagnostic information used to keep the app reliable and secure.

• To store and organise your vault on your device — naming, categorising, and filing documents, and detecting expiry dates so you can be reminded in time.
• To sign you in and keep your account secure.
• To create and restore the encrypted backups you choose to make.
• To send you the reminders you have asked for.
• To maintain security, prevent abuse, and diagnose technical issues.
• To respond to your support and data requests.

We do not sell or rent your data, and the contents of your vault are never used for advertising or unrelated profiling.

VaultMind can use AI to name, categorise, and read documents and to detect expiry dates. To do this, the relevant document content is sent securely to our AI provider (Google) only to process that specific request; the results are returned to your device and stored locally. AI content is not used for advertising or unrelated profiling. AI suggestions can occasionally be wrong, so important details should be verified against the original document.

VaultMind is built privacy-first:

• Your vault is stored on your device, not on our servers.
• App access can be protected with biometric authentication (Face ID / Touch ID) on supported devices, on top of your device's built-in data protection.
• Backups are encrypted on your device before they leave it, using a recovery phrase only you hold — so backup contents cannot be read by us.
• Data transmitted for AI processing and account sign-in is sent over encrypted connections.

• Add, edit, and permanently delete any document, note, or record on your device at any time.
• Choose whether to create encrypted backups, and where to keep them.
• Request information about your account data by contacting support@biggermindgroup.com.
• Delete your account and entire vault whenever you choose — see our Delete Account page for the exact process.

Family profiles are created and managed by the account holder, who is responsible for having the right to store documents and records relating to family members. Family profiles and their contents are stored on your device alongside the rest of your vault.

Because your vault is stored on your device, your data remains with you for as long as you keep the app installed and your account active. When you delete content it is removed from your device immediately. When you delete your account, your account record and any encrypted backup we hold are removed, subject to the limited legal and security retention described on our Delete Account page.

We may update this policy as VaultMind evolves, and will communicate material changes in the app or by email. For any privacy question or request, contact support@biggermindgroup.com — privacy requests are acknowledged within 2 business days and completed within 30 days.