Privacy Policy

Matrix Vault is built device-first: your vault, photos, passwords, notes and messages are encrypted on your iPhone or iPad with AES-256, and the key that unlocks your vault is protected by your device's secure hardware. This page explains what stays on your device, what travels over the network and why, who handles it, and your rights.

Who is responsible

The controller of your personal data is Stingray International FZ-LLC, a Free Zone limited liability company in the United Arab Emirates. Contact us about privacy at privacy@matrixvault.app. We will name our representatives in the EU and the UK here once they are appointed.

What we can never read

• The files, photos, notes and passwords in your vault — encrypted on your device.
• Your one-to-one and group messages — end-to-end encrypted.
• Your private browser activity in the app.
• Whether a hidden vault exists, and what it contains.

Matrix Vault shows no advertising, builds no advertising profile and never sells your data.

What leaves your device, and why

• Message delivery. Our relay servers in the EU (Finland) pass encrypted messages between devices. To do that they keep your account identifiers (username, display name, device ID and public keys), your groups and blocked contacts, when you were last online, your push-notification token, encrypted messages waiting for an offline device (up to 7 days), and, if a contact using the separate YoMatrix app tries to call you, a record of that attempt (who and when, kept 7 days) — Matrix Vault itself cannot make or receive calls. We never keep message content. Media you send is stored encrypted on our servers and deleted after 7 days.
• Push notifications go through Apple's Push Notification service and carry only an encrypted message that Apple cannot read.
• Email. Every account gets email addresses, switched on by default (you can switch them off). Email is never end-to-end encrypted: incoming mail is received by our mail server and passed into the app, marked not end-to-end encrypted. Mail you send goes out through our mail server; we keep delivery records (sender domain, time, size) for up to 90 days, never the content. If you connect Gmail, the app reads your mailbox with read-only access; the access key stays on your device. If you turn on email copies, we also send each incoming email to an address you choose and verify.
• AI assistant. By default the assistant runs on our own servers. If you add your own key for another provider (such as Anthropic, OpenAI, Google, xAI or Xiaomi), your questions go to that provider under its terms. When you ask it to, the assistant can read your messages, email, notes, calendar, reminders, contacts, photos and voice messages, the documents in your vault and the details of your saved logins (names, usernames, web addresses and notes — never the passwords themselves), and sends what it finds to the AI you use. Things you ask it to remember are stored on your device, encrypted with your vault key; with your own OpenAI key, that memory search uses OpenAI. Spoken replies are made on our own servers, or by a voice provider you choose. The assistant's web search, on by default, sends your search terms to DuckDuckGo.
• Translation and voice notes. Translation and transcription happen on your device by default. If you switch on server translation or transcription, the app asks first; the text or audio is then sent to our own servers, processed, and not kept.
• Helper bots. Chats with helper bots are end-to-end encrypted like any chat, but the bot itself runs on our servers and reads what you send it. To answer, some bots pass your request to outside services: LanguageTool (spell-check), Open-Meteo (weather), Wikipedia, dictionaryapi.dev, Datamuse and CoinGecko.
• Other services the app contacts. Weather comes from Apple WeatherKit, using an approximate location. The Timer login screen shows market prices from Yahoo Finance and CoinGecko. None of these receive your vault or messages. GIF search is switched off, and the app does not fetch link previews, so links you share are not opened on your behalf.
• Backup. Backup is optional. If you use iCloud backup, an encrypted copy of your vault — including its keys and your passwords — is stored in your Apple iCloud account. It is encrypted with your PIN, so its protection is only as strong as your PIN: use a long, unpredictable one. Files can also move to a new iPhone directly over your local Wi-Fi, without any cloud.
• Connected apps. Apps and webhooks you connect send their messages through our servers; these are marked not end-to-end encrypted.
• Diagnostics. The App Store version uploads no crash or usage reports. Beta (TestFlight) builds let you choose to send diagnostic reports to our support team; these contain no message content and are deleted after 7 days.
• Reporting a contact. If you report someone in the app, we receive your @handle and theirs, the app each of you uses, and the reason you picked, and it goes to our support team by email — never your messages, which we cannot read. The contact is also blocked for you.
• Support and launch sign-ups. If you contact us, we keep your message and email address to answer you; requests sent from the app also include your app and iOS version, device model and username. If you sign up on this website to hear about the launch, we use your email address only for that, and keep it until launch or until you ask us to remove it.

Why we may use your data (legal bases)

• To provide the app and the features you use — performing our contract with you.
• Optional features (server translation or transcription, beta diagnostics, launch emails) — your consent, which you can withdraw at any time.
• Security, abuse prevention and keeping the service running — our legitimate interests.

How long we keep it

Account data is kept while you have an account and erased when you delete it. Media is deleted after 7 days, beta diagnostic reports after 7 days, and translation or transcription text is not kept. Messages from apps you connect are deleted 7 days after delivery. Our servers keep security logs, including IP addresses, for up to 30 days, and never log what your messages say. Support email is kept only as long as needed to help you.

Where it is processed

Our main servers are in Finland (EU), with a standby in Germany, both hosted by Hetzner; some processing happens in the United Kingdom, with a backup provider in Iceland used only during outages. Our support inbox is handled by Google. Apple and any AI provider you choose yourself may process data outside the EU under their own terms; our company is in the United Arab Emirates. Where the law requires it, we use appropriate safeguards for these transfers.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, and to receive it in a portable form. Email privacy@matrixvault.app. You can also delete your account in the app. If you are in the EU or the UK, you may complain to your data protection authority.

This website

This website sets no cookies and loads nothing from other companies. Your browser stores only your language and display choices.

Automated decisions

We make no automated decisions about you that have legal or similar effects.

Payments

Matrix Vault is a paid app sold through Apple's App Store. Apple handles the payment; we never see your card details.

Children

Matrix Vault is not directed to children under the age required to consent to digital services in your country, and we do not knowingly collect their data.

Changes

We will update this page when the app changes how it handles data, and change the date at the top.