Privacy Policy

Kinvault · Developer and operator: Sudarev Daniil · Last updated: November 14, 2026

Kinvault ("the app") keeps your family's documents — passports, policies, certificates, vaccination records — in an encrypted vault on your phone. It works without an account and without the internet, and then no personal data leaves your device. We never sell or share your data.

1. Your documents stay on your phone

Documents, photos and scans are encrypted on the device with AES-256-GCM. The key is kept in the iOS Keychain / Android Keystore and the vault opens with Face ID, Touch ID, fingerprint or your passcode. We cannot see your documents and have no copy of the key. Deleting the app deletes the vault.

2. Scanning and text recognition

The camera is used only when you scan a document yourself; from the gallery the app receives only the pictures you pick. Text and dates are recognised on the phone (built-in Apple Vision / VisionKit or Google ML Kit). Pictures are never sent anywhere for recognition.

3. Reminders

Expiry reminders are local notifications scheduled on your phone. No server is involved.

4. Encrypted backup

A backup is a file encrypted with a password you choose. You decide where to save it (Files, iCloud Drive, Google Drive and so on). We do not receive it and cannot open it without your password.

5. Optional account and shared family vault

An account is needed only for the shared family vault. You can sign in with Apple, Google or email. Then our server (Supabase, protected by access rules) stores: your sign-in ID and email address, the family ID and membership, and the shared documents only as ciphertext. Documents are encrypted on the phone with the family key before they are sent; the family key is passed between relatives by an invitation code or QR and never reaches our server. We cannot read the shared documents.

This data is not used for advertising or tracking and is not shared with third parties. You can leave the family or delete the account in the app: "Settings" → "Delete account". Deletion is immediate and permanent; documents on your phone stay where they are.

How to delete your account without the app: open sudarev.app/delete-account or email support@sudarev.app from the address you signed in with, subject "Delete account". We delete the account and its encrypted data within 7 days and confirm by email.

6. Purchases

Kinvault Pro is sold through the App Store or Google Play. Payments are handled by Apple or Google; we do not receive your card details. The app only checks whether Pro is active. "Restore purchases" is in Settings.

7. No ads, analytics or tracking

The app has no advertising, analytics, crash reporting, trackers or third-party SDKs that collect data, and does not use the advertising ID. The microphone, contacts and location are not used.

8. Children

Without an account the app collects no data from anyone. Parents may store their children's documents in their own vault; accounts are intended for users aged 13 and over.

9. Changes and contact

If this policy changes, the new version will be published on this page. Contact: support@sudarev.app.