Privacy Policy

Last updated: October 2026

BlackVault is built to collect as little as possible. We cannot read your messages, files or calls.

What we do NOT collect

• No phone number, email address or real name.
• No contacts from your phone, no location, no advertising identifiers, no tracking or analytics.
• No message content, file content or call content — everything is end-to-end encrypted on your phone.
• No cloud backup of your chats.

What the server stores

• Account: your pseudonymous username, optional display name, public encryption keys, account status, and the time you last connected.
• Messages in transit: encrypted messages and files wait on the server only until your phone receives them, then they are deleted. Undelivered items are deleted automatically after 7 days.
• Device: phone model, operating system version and app version, so the administrator can help with support and require updates. No IMEI, serial number or other hardware identifier.
• Organisation settings: which contact groups and project groups the administrator placed you in, an optional account end date, and administrator announcements.
• Notifications: a push token so your phone can be woken for new messages and calls. Notifications contain no names and no message content.
• PIN reset: a random recovery secret that is useless without your phone.
• Security log: events such as failed sign-ins, reports and admin actions, kept for up to 90 days.

On your phone

Chats, contacts and files are encrypted with a key that cannot leave your phone. They are excluded from device backups. Entering a wrong PIN 5 times in a row erases them.

Sharing

We do not sell or share data. Infrastructure is provided by Cloudflare (servers) and Apple/Google (notification delivery); they only handle encrypted data.

Deletion

Delete your account in Settings → Delete my account. Your account, keys, push token and pending messages are removed from the server immediately, and all data on your phone is erased. See account deletion.

What the administrator can and cannot do

The administrator can create and remove accounts, see whether an account is online, lock the app, and erase a lost phone. The administrator can never read, listen to or export your messages, files or calls.

Contact

Contact your BlackVault administrator through the in-app Help & safety section, or email support@blackvault.chat (see Support).