سياسة خصوصية LinkVaultLinkVault Privacy Policy

1. Scope

This policy explains how LinkVault Q8 (“LinkVault” or the “app”) handles data when you use the iPhone and Android apps, this website, and support. By using the service, you acknowledge the processing described here.

2. Data we handle

Library data

This includes full URLs, titles, notes, custom types or categories, platform, favorites, link images or thumbnails, trailer information, and creation and update dates. When you use LinkVault without signing in, the core library remains in the app’s private local storage on your device, except for information you choose to send to an external feature.

Account and sync data

When you sign in by email, Apple, or Google, we process the email address or provider identifier, your LinkVault user ID, and the session needed for authentication. Links and types are synchronized to your account through Supabase. Your sign-in session persists on your device for convenient access.

Plan and purchase data

We handle an app user identifier, product or offering, Pro entitlement status, and transaction or subscription information provided by the App Store or Google Play through RevenueCat. LinkVault does not receive your full payment-card number. We also keep a cumulative link-save counter to enforce Basic’s 50-save limit.

Optional usage statistics

Usage-statistics sharing is enabled by default, and you can stop new statistics from being sent in Settings under privacy controls. While enabled, account-linked statistics may include app version, platform, language, theme, counts of links, types, favorites, opens, additions, syncs, backups, restores, and QR scans, along with type names, platform names, domains used, and internal identifiers of opened links. These statistics do not include the full URL, link title, note, or image itself.

Technical data and support messages

Infrastructure providers may process IP address, device or browser type, request time, crash logs, and security logs needed to operate the service and prevent abuse. If you email support, the sender address, message, attachments, and technical email headers may be processed by ImprovMX and Gmail to deliver and answer your message.

3. Device permissions

Android requests camera access only when you use the QR scanner; the code is read without requiring LinkVault to retain camera video or frames. Internet access is used for sync, sign-in, public link metadata, and purchases. LinkVault does not request location, contacts, microphone, photo library, or advertising-ID access. Sharing into LinkVault accepts text or an HTTP(S) URL and an accompanying title.

4. How we use data

• Operate the library and save, organize, and search links.
• Create accounts, authenticate users, and synchronize their sessions and devices.
• Retrieve public link or trailer information when requested.
• Enforce Basic limits, verify Pro entitlement, and restore purchases.
• Provide backup, restore, and merge when included in the plan.
• Improve reliability, understand use, and protect against fraud and abuse.
• Answer support and process privacy and account-deletion requests.

5. Link metadata and backups

When you request a title or image, the full URL may be sent to the LinkVault backend hosted on Railway. The backend may fetch the public page or use YouTube, TikTok, or Vimeo oEmbed. A trailer search phrase may be sent to TMDB or YouTube when that feature is available. This happens to perform your request, not for sale or advertising.

A JSON backup is created on your device and may contain URLs, titles, notes, types, images, trailers, favorites, and some preferences. It goes only to the destination or app you choose in the system share sheet. Once exported, the file is under your control and the destination provider’s policy.

6. Service providers

• Supabase: authentication, account management, database storage, sync, and signed-in usage statistics when enabled. See Supabase Privacy.
• RevenueCat: purchase offerings, subscription and Pro entitlement status, and purchase restoration. See RevenueCat Privacy.
• Apple and Google: optional provider sign-in and store transactions, billing, subscriptions, and refunds. See Apple Privacy and Google Privacy.
• Railway and metadata providers: LinkVault backend hosting and public link or trailer data requested by you.
• Google Fonts and jsDelivr: interface resources and the browser Supabase library; they may receive ordinary technical request data such as IP address and browser type.
• ImprovMX and Gmail: forwarding and delivery of support messages.

7. Sharing and advertising

We do not sell your data, and we do not allow library content to be used for targeted advertising or cross-app tracking. We disclose the minimum necessary to the providers above to operate the feature you use, when required by law, or to protect users and investigate abuse. Sharing an individual link uses your device’s system share sheet and may copy the URL to the clipboard as a fallback.

8. Retention and deletion

Local data remains until you delete it, delete the account inside the app, clear app data, or uninstall the app. Account data and synced content remain in active systems while the account exists or as needed to provide the service. Account deletion removes the account, synced content, and account usage statistics from LinkVault active systems. In-app deletion also removes that account’s local data from the current device.

Limited technical backups, caches, or security and legal records may remain until their ordinary retention cycle ends or as legally required. Apple, Google, and RevenueCat may retain transaction records under their obligations. Account deletion does not cancel a store subscription or delete exported backups or local data on other devices. See the Account Deletion page for complete instructions.

9. Your choices and rights

You can view, edit, and delete content; stop new usage statistics; export a backup when included in your plan; and delete your account in the app. To request help, access, correction, or deletion, email us from the account address. We may request the minimum information needed to verify that the request relates to you.

10. Security and international processing

We use HTTPS in transit and provider authentication and access controls, and the Android app blocks cleartext network traffic. No internet-connected service can guarantee absolute security. Providers may process data in other countries under their legal and contractual arrangements.

11. Children

LinkVault is not directed to children and is not intended for anyone below the applicable digital-consent age without guardian supervision. If you believe a child provided data without appropriate authorization, contact us so we can review the request.

12. Changes and contact

We may update this policy as features, providers, or requirements change. The current version and date will be posted here. For questions or requests, email support@linkvault.info.