Privacy Policy for ScribeVault

Effective Date: October 30, 2026

Application: ScribeVault (com.scribevault.app)

Developer Contact: androidpyus@gmail.com

1. Introduction & Core Principle

ScribeVault ("we", "our", or "the app") is designed from the ground up as a privacy-first, on-device application. Our foundational architectural principle is simple:

Your voice, audio recordings, notes, and transcripts are strictly private and never leave your device.

We do not operate backend transcription servers, cloud inference APIs, telemetry collectors, or remote analytical tracking services. All speech-to-text processing, summarization, and action item detection is executed 100% locally on your device's hardware.

2. Information We Access and Process

2.1 Audio Data & Microphone Access (RECORD_AUDIO)

• Purpose: ScribeVault requires access to your device's microphone solely when you explicitly tap the record button to capture voice memos, meeting notes, or lectures.
• Processing: Audio waveforms are converted to text exclusively on-device using local quantized neural network models.
• Storage & Transmission: Raw audio files (.m4a, .wav) are saved in the app's sandboxed local storage directory. Audio recordings are never uploaded, streamed, or transmitted to any external server.

2.2 Imported & Shared Audio Files

• When you import an audio file, or share one to ScribeVault from another app (for example a voice message), the app copies that single file into its private storage and transcribes it on-device. It does not access any other files on your device.

2.3 Speaker Detection

• To label who said what, ScribeVault compares the sound of the voices in a recording on your device. These voice measurements are used only while the recording is being transcribed and are then discarded; only the speaker labels (such as "Speaker 1") are saved with the note.
• ScribeVault does not create voiceprints, does not identify who a person is, and does not compare voices across recordings.

2.4 Transcripts, Notes, & Speech Intelligence Data

• Processing: Meeting summaries, key topics, and action item checklists are extracted locally using on-device heuristic natural language algorithms.
• Storage: All notes and metadata are stored locally in an embedded SQLite database protected with SQLCipher AES-256 encryption at rest.
• Transmission: Zero bytes of text or metadata are ever transmitted off-device.

2.5 Biometric Data (USE_BIOMETRIC)

• When enabled in Settings, ScribeVault uses Android's official BiometricPrompt framework to unlock the app with your fingerprint, face, or device PIN/pattern.
• We do not collect, view, or store biometric signatures. Authentication is handled strictly by the secure hardware enclave of the Android operating system.

2.6 Calendar Events & Exports

• Add to Calendar: When you tap Add to Calendar on an action item, ScribeVault opens your calendar app with the event details filled in. You review and save the event there. ScribeVault does not request calendar permission and cannot read your calendar.
• Exports & Sharing: When you export or share a note (Markdown, PDF, text or subtitles), the content goes only to the app or destination you choose. What that app does with it is governed by its own privacy policy.

2.7 Usage Count

• To apply the free plan's weekly limit, the app keeps a count of transcriptions in its encrypted local database. This count never leaves your device.

2.8 Device & Network Information

• The app requests internet access (INTERNET) only to download on-device AI speech models and to handle Google Play Billing transactions. No audio, transcripts, or notes are sent over the network.
• We do not log IP addresses, device identifiers (IMEI, Android ID), advertising IDs, or location data.

3. In-App Purchases & Subscriptions

ScribeVault integrates with the official Google Play In-App Billing API to offer optional ScribeVault Pro subscription plans:

• All payment transactions, credit card data, and billing details are processed directly by Google Play. ScribeVault never receives or stores your financial or payment details.
• Google Play provides the app with a cryptographic purchase token to verify subscription validity.

4. Third-Party Services & Analytics

• No Third-Party SDKs: ScribeVault contains no third-party tracking, analytics, or advertising SDKs (such as Firebase Analytics, Adjust, AppsFlyer, or Facebook SDK).
• Model Downloads: Speech models are downloaded from Hugging Face (huggingface.co). As with any web request, Hugging Face receives your IP address and standard request headers; see the Hugging Face Privacy Policy. No personal data or content is sent.
• Google Play: Purchases are processed by Google under the Google Privacy Policy.
• No Data Sharing: We do not sell, rent, monetize, trade, or share user data with any third parties, data brokers, or advertising networks.

5. User Data Control & Deletion Rights

You have complete, absolute control over your data:

• Instant Deletion: You can delete individual audio notes or transcripts at any time by tapping delete in the app.
• Bulk Deletion: You can select all notes in the notes list and delete them together (audio files are deleted with them), and remove downloaded AI models in the Settings menu.
• App Uninstall: Uninstalling ScribeVault from your device immediately purges all app-sandboxed audio recordings, encryption keys, and database files.

6. Children's Privacy

ScribeVault is a general audience productivity application and does not knowingly collect personal information from children under the age of 13. Because no data leaves the device, no personal information of any user is gathered or stored.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory adjustments. Any updates will be posted on this page with a revised "Effective Date".

8. Contact Us

If you have questions or suggestions regarding this Privacy Policy, please contact us:

• Email: androidpyus@gmail.com