Steiner Vault — Privacy policy

Steiner Vault does not collect your data. Every decision behind this policy passes through one sentence, the rule of the whole company: Your privacy is more important than our profit. This page is that sentence’s fine print — and like the rest of this site, it contains no JavaScript, no cookies, and no trackers.

What the app collects

• Nothing. No account, no sign-in, no email required, no name.
• No analytics, no advertising SDKs, no crash-reporting services, no fingerprinting — not in the app and not in any of its dependencies.
• No telemetry of any kind reaches us. We do not know you exist, and consider that a feature.

The strongest line in any privacy policy we know of

The free version of Steiner Vault ships without the INTERNET permission. Not “we promise not to use the network” — the Android manifest the store distributes literally does not contain it, so the app cannot open a socket even if its code wanted to. Our continuous integration measures the built release APK on every push and fails the build if the permission ever appears. You can verify any published version yourself with your phone’s app-info screen or any APK inspector; you do not have to take our word for it.

What stays on your device

• Rooms, items, serial numbers, warranty dates, values — your inventory.
• Photos and scans of documents and belongings, including everything recognized by on-device OCR; there is no cloud recognition service behind the curtain.
• Backups, which are files you create on your device — one encrypted .vbk file, readable only with the passphrase only you hold.
• Uninstalling removes every byte the app ever stored. There is nothing left on our servers to delete, because our servers hold nothing. That isn’t a workaround — it is the design.

Where the network appears, and what it touches

• Steiner Vault (free): none. See the section above.
• Steiner Vault Pro — your own cloud (opt-in): when you configure a WebDAV server and switch the daily backup on, the app encrypts your vault on your phone and uploads the sealed file directly to the server you own. We never see it, hold a copy of it, or can recover it. No telemetry rides along with the upload; the upload is the only thing Pro’s network permission is used for.
• Hand-offs are hand-offs: backups leave through your phone’s share sheet, the contact link opens your mail app, this page opens your browser. The app itself sends nothing to us — by design in the free flavor, by permission in the Pro one.

The trial clock is local

The 14-day Pro trial counts days on your own clock, from first launch. No phone-home, no device fingerprint, no attestation. Yes, that means a determined user could reset it by reinstalling — and we accepted that trade on purpose: closing the hole would mean surveilling honest users, and your privacy is more important than our profit.

Google Play Data safety

Consistent with the above, both apps’ Play Data safety summaries declare: no user data collected, no user data shared. During closed beta only, Google Play may share anonymized device diagnostics (crash and ANR reports) with us under Play’s own program terms; nothing is transmitted from the app for this purpose.

If this page ever reads differently than the app does

The app is wrong, and we want to hear about it — that sentence is in the policy on purpose, with the app’s behavior pinned to build-time checks that run on every push.

Questions

Write to hello@steinerdevelopers.dev — a human reads it, and the answer will not be “we sold your data.” See also the company-wide privacy pledge and our other app, Steiner Budget.