File Encryption VaultPrivacy Policy
Last updated: October 25, 2026
1. Summary
File Encryption Vault ("App") encrypts files on your computer. It has no network access, no account, no analytics, no advertising and no crash reporting. Your files, passwords and recovery keys never leave your computer, and we (the developer, Richard Pham) never receive anything from the App.
2. What the App handles
- Your files: the files you add are encrypted into the vault folder you choose. Decrypted content is kept in memory for previews; "Open in default app" writes a temporary decrypted copy in the App's cache folder, re-encrypts it if you edit it, and deletes it when the vault locks or the App next starts.
- Passwords and recovery keys are used on your computer to unlock the vault and are never stored, except: on Mac with Touch ID turned on, the vault password is kept in your login Keychain (this device only, not synced) and released only after Touch ID.
- Settings: language, auto-lock time, and the list of vaults you opened (their locations; on Mac, security-scoped bookmarks so the App can reach them again). Stored in the App's data folder.
- While a vault is open for changes, the vault folder contains
lock.jsonwith a random install id (never a computer or user name), so a second computer opens it read-only.
3. Network
None. The Mac App Store edition is built without the network entitlement; the Microsoft Store edition declares no network capability. Purchases of Pro are handled by Apple or Microsoft; we receive no payment details.
4. Permissions
- macOS: App Sandbox with access only to files and folders you pick (and bookmarks to them); Touch ID only if you turn it on.
- Windows: a standard desktop app with access to the files you pick or drop.
5. This website
vault.richardpham.com is a static site on Cloudflare Pages. Cloudflare Web Analytics counts page views without cookies and without identifying you. We set no cookies.
6. Children
The App collects no personal information from anyone, including children.