Privacy Policy

1. Who we are

LinkVault is a personal link management application operated as an independent project. For questions about this policy, contact us through the in-app support channel.

2. What data we collect

When you create an account and use LinkVault, we collect:

• Account information — email address and display name provided via Google or Apple OAuth.
• Links and metadata — URLs, titles, tags, categories, and notes you save.
• Device information — device model, OS version, and a unique installation identifier for sync purposes.
• Usage events — basic sync timestamps and error logs to diagnose issues.

We do not collect: browsing history, keystrokes, clipboard contents (beyond what you explicitly share), or precise location.

3. How we use your data

We use the data we collect solely to:

• Authenticate your account and maintain your session.
• Sync your links across devices.
• Extract metadata (title, description, thumbnail) from URLs you submit to improve your library entries.
• Diagnose errors and improve application performance.

We do not use your data for advertising, behavioral profiling, or any purpose beyond operating LinkVault.

4. Data storage and security

Your data is stored in Supabase (PostgreSQL) hosted in the EU. All data is protected by:

• Row-Level Security (RLS) — your links are only accessible to your authenticated account.
• TLS encryption in transit for all API communications.
• Encrypted credentials stored in your device's secure storage (Keychain on iOS, Keystore on Android).

Locally on your device, links are stored in an SQLite database accessible only to the LinkVault app.

5. Data sharing

We do not sell, rent, or share your personal data with third parties, except:

• Supabase — our database and auth provider (data processor).
• Google / Apple — for OAuth authentication only. We receive your name and email; no other data is shared.
• Legal requirements — if required by law or a valid legal process.

6. Data retention and deletion

You can delete your account and all associated cloud data at any time from the LinkVault app settings (Account → Delete Account). Deletion is permanent and irreversible. Local data on your device is removed when you uninstall the app.

7. Browser extension

The LinkVault browser extension accesses only the active tab URL and title when you click the save button. It does not read your browsing history, monitor background tabs, or execute scripts on pages you visit.

8. Children's privacy

LinkVault is not directed at children under 13. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy as the app evolves. Material changes will be communicated via in-app notification. Continued use after changes constitutes acceptance.

10. Contact

For privacy questions or data requests, use the support channel inside the LinkVault app or browser extension.