Privacy Policy

This Privacy Policy describes how information is handled when you use mobile applications published under the VoroForge developer name and our website at voroforge.pages.dev (collectively, the “Services”). Our Terms of Service govern your use of the Services.

1. Overview

Our current Android apps do not require user accounts and are designed to keep user-created content on your device. We do not sell personal information.

Use of the Services may involve the following categories of information:

• Local app data - content, settings, reminders, preferences, and other information created within an app and stored locally on your device. This information is not transmitted to or accessible by us unless specifically stated otherwise.
• Support communications - information you choose to provide if you contact us directly.
• Diagnostic data - crash information and limited device information made available through Google Play crash reporting to help identify and fix application failures.
• Technical connection data - standard information such as IP address, browser or device type, system information, request information, and security logs that may be processed when accessing our website or when an app retrieves remote configuration resources.

2. Website and third-party services

Cloudflare

Our website and some remote configuration resources are hosted or delivered using Cloudflare infrastructure. When you access the website or when an app retrieves remote configuration data, Cloudflare may process standard technical connection information such as an IP address, browser, device, or operating system information, request information, and security and network logs. This information may be processed for hosting, content delivery, security, performance, and reliable operation of the Services. For more information, see the Cloudflare Privacy Policy.

We do not use this technical information to create profiles of individual users.

Google Play

Our Android apps are distributed through Google Play. Google may process information relating to app downloads and installations, device information, purchases (where applicable), and use of Google Play under Google's own privacy policies. Google Play crash reporting may also make crash information and limited device information available to us to help diagnose application failures. For more information, see the Google Privacy Policy.

Email

If you contact us by email, your message and related information are processed through our email service provider so that we can receive and respond to your communication.

Cookies and similar technologies

Our website may use strictly necessary cookies or similar technologies where required for security, content delivery, or proper operation. We do not use marketing or advertising cookies on the website without obtaining consent where consent is required by law.

3. Per-app details

Each published app is described below. If we introduce an app with different data practices, we will update this Privacy Policy and the relevant Google Play disclosures.

VaultNote

VaultNote is a notes and checklist app with privacy features.

Data stored locally by VaultNote

• notes and checklist content;
• private or hidden notes protected by a PIN;
• reminder settings;
• app settings and preferences;
• other information necessary for local app functionality.

Your note content is stored on your device and is not transmitted to or accessible by us.

Data we do not collect through VaultNote

Through the current version of VaultNote, we do not collect:

• your name, email address, or postal address;
• user accounts or login credentials;
• note or checklist content;
• precise or approximate location;
• contacts;
• usage analytics; or
• information for advertising purposes.

Current version

The current version of VaultNote:

• does not require an account;
• does not display advertising or include an advertising SDK;
• does not use usage analytics;
• uses Google Play crash reporting for crash information and limited device diagnostic data;
• does not offer in-app purchases or subscriptions;
• does not provide cloud backup or cloud synchronisation;
• uses local Android system notifications to provide reminders; and
• may retrieve remote configuration information to support app functionality, maintain compatibility, or manage features.

Note content remains on your device until you delete it, clear the app's data, or uninstall the app.

If we later introduce advertising, analytics, accounts, cloud storage, in-app purchases, subscriptions, or other functionality that changes how information is handled, we will update this Privacy Policy and applicable app disclosures as required.

4. Purposes and legal bases

Where GDPR or similar data protection laws apply, personal information is processed only where there is an appropriate legal basis.

Support communications

If you contact us, information contained in your message is used to respond to your request and provide support. Where GDPR applies, the legal basis is our legitimate interest in communicating with users and providing support.

Crash reports

Crash and diagnostic information made available through Google Play may be used to identify bugs, investigate application failures, improve stability, and maintain the security and reliability of our apps. Where GDPR applies, the legal basis is our legitimate interest in maintaining and improving the Services.

Website and remote configuration

Technical connection information may be processed to deliver website and remote configuration content, maintain security, prevent abuse, diagnose technical problems, maintain compatibility, and operate the Services reliably. Where GDPR applies, the legal basis is our legitimate interest in securely providing and maintaining the Services.

Local app content

Content stored only on your device and not transmitted to us is not accessible to us.

5. Sharing and international processing

We do not sell personal information.

Information may be processed by service providers where necessary to operate the Services, including:

• Google, for Google Play distribution and crash reporting;
• Cloudflare, for website hosting, content delivery, security, and remote configuration infrastructure; and
• our email service provider, when you contact us directly.

These providers may process relevant information under their own terms, privacy policies, and applicable data protection obligations. Information may also be disclosed as required by applicable law, in response to valid legal process, or in response to a binding request from a competent authority. Some service providers may process information in countries outside the European Economic Area. Where GDPR applies and an international transfer requires additional safeguards, we may use appropriate legal mechanisms, such as an adequacy decision or Standard Contractual Clauses.

6. Data security and retention

We use reasonable technical and organisational measures appropriate to the nature and limited scope of information processed in connection with providing the Services. Connections to our website and remote configuration resources use HTTPS to protect information in transit. VaultNote note content is stored locally on your device and is not transmitted to us. No method of electronic storage or transmission can be guaranteed to be completely secure.

Retention

• Local VaultNote data remains on your device until you delete it, clear the app's data, or uninstall the app.
• Support communications may be retained for up to 24 months after the relevant support request has been resolved, unless a longer period is reasonably necessary for legal, security, or dispute-resolution purposes.
• Crash and diagnostic data available through Google Play is retained according to applicable Google Play settings and retention practices.
• Technical hosting and security logs may be retained by infrastructure providers according to their service configurations and retention policies.

Because VaultNote currently has no user accounts and we do not store your note content, there is no server-side VaultNote account or note database for us to delete.

7. Your rights

Depending on where you live, you may have rights regarding personal information. To exercise them, use the contact details in section 9. We generally respond within one month for GDPR requests.

These may include the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your personal information;
• request restriction of processing;
• object to certain processing; and
• request data portability, where applicable.

For information stored only on your device and never transmitted to or accessed by us, we cannot access, correct, export, or delete that information on your behalf. You can manage or delete such information directly through the app or your device settings.

You also have the right to lodge a complaint with the data protection supervisory authority competent under applicable law.

In Poland, the competent supervisory authority is:

President of the Personal Data Protection Office (UODO),
ul. Stawki 2, 00-193 Warsaw
https://uodo.gov.pl

8. Children’s privacy

Our Services are not directed at children under 13 or any higher minimum age required by applicable law. We do not knowingly collect personal information from children through our apps. If you believe that a child has provided personal information to us, for example by contacting us directly, please contact us and we will take appropriate action where required.

9. Data controller and contact

The controller of personal data processed in connection with the Services is First Last, operating in Poland under the VoroForge developer name. For privacy-related questions or requests, you may contact us using the details below.

Contact: voroforge@proton.me

10. Changes

We may update this Privacy Policy from time to time, for example to reflect changes to our apps, service providers, functionality, legal requirements, or data practices. We will post the updated version on our website and revise the “Last updated” date.