Privacy policy

Who we are and what this covers

JTR Labs LLC, United States ("JTR Labs," "we," or "us"), provides Vault: Save & Read Later, its optional hosted sync service and these Vault webpages. This policy covers the iOS and Android apps and the pages under jtrlabs.com/vault/. It describes the current beta. Other JTR Labs products have their own policies.

Contact admin@jtrlabs.com with privacy questions or requests. Vault can be used locally without an account.

Information stored on your device

Vault stores the content you choose to save: article text, links, titles, notes, images, PDFs, audio recordings, videos and other files, along with tags, collections, favorites, extracted text, capture drafts, import status and search indexes. Documents can contain personal, financial, health or other sensitive information depending on what you choose to save. Vault does not require those details to use the app.

Local capture, organization, search and supported text recognition work on the device. Local-only saved content is not uploaded to our sync service unless you enable sync. Network-based features and Android SDK diagnostics are described separately below.

Optional cloud accounts and synchronization

If you create or connect a sync account and consent to syncing, we process your library’s saved content and attachments, including saves marked private, and the metadata needed to synchronize changes and preserve conflicts. We also process random library and device identifiers, your device display name, synchronization versions, timestamps, attachment hashes, pairing state and authentication verifiers.

Accounts use recovery keys and individual device credentials rather than email passwords. No email address is required for signup. Keep the recovery kit outside your device: anyone possessing it can recover access, and we cannot reset it by email. Server authentication stores one-way credential verifiers; devices hold the credentials required for access.

We use this information to provide sync, authenticate devices, recover access, prevent unauthorized access and operate the service. Our hosted backend and storage run on Railway. A separate security authority maintains current deletions and revocations. If you configure another compatible server, its operator controls the information sent there and its policies apply.

Article capture, links and external providers

When you fetch an article, preview or other remote resource, the originating website receives a network request, including the IP address and request information normally needed to return that resource. Opening an original link uses the relevant browser or app. Those providers’ privacy practices apply. Saving readable text does not bypass access restrictions or preserve all website content.

AI answers and summaries in the updated Vault apps use only on-device models: Apple’s Foundation Models on compatible iOS devices and Gemini Nano through ML Kit and Android AICore on supported Android devices. Vault does not send AI questions or source excerpts to a hosted AI provider and has no cloud inference fallback. Local generation may process private saves when they are selected as relevant sources inside your unlocked library. Model availability depends on hardware, system settings, language and downloaded model availability. Model downloads and updates can require internet access; unsupported devices retain local search and offline reading. No provider credentials are requested. The app removes its formerly configured external-AI key during upgrade. If you previously used an older version’s external-provider feature, information already sent remains subject to that provider’s policy; updating Vault does not erase those historical transfers.

Permissions, device security and Android SDKs

You choose files and photos through platform pickers or sharing, use camera capture where supported, or explicitly paste from your clipboard. Microphone permission is used for voice recording when you choose that feature. You can revoke permissions in device settings. Device-lock authentication uses the operating system; Vault does not receive your biometric templates.

Android uses Google’s bundled ML Kit text-recognition SDK and the ML Kit GenAI Prompt SDK for Gemini Nano. Recognition and AI inference inputs and results are processed on device. The SDK can send technical diagnostics and usage information to Google, including device model and OS information, app version, user/device or other identifiers where used by GenAI features, per-installation identifiers, feature events, configuration, input/output sizes, timing and error codes. Google states these SDK transfers use HTTPS. See Google’s ML Kit disclosures and Google’s privacy policy.

Vault does not display advertisements. The current Android release configuration includes the Meta SDK with automatic initialization, automatic app-event logging and advertising-ID collection disabled. We do not enable Meta advertising measurement in this beta. Any future change to that behavior requires corresponding disclosures and consent where required.

Website, support and operational information

These Vault webpages do not embed advertising, analytics scripts or third-party fonts, and do not set application cookies. Cloudflare hosts and delivers the website and may process network and security information such as IP addresses, requested paths, browser information and request times to deliver and protect it. Infrastructure providers may keep operational logs under their policies.

We use Better Stack for service uptime and resource monitoring. Its checks concern backend health and resource usage, not your saved library contents. The sync application avoids logging saved URLs, content and credentials. Network infrastructure may still process request metadata.

If you email us, we receive your email address, message and any attachments you send, and use them to respond and maintain support records. Please do not email recovery keys, device tokens or private library content. Include only information needed for your request.

Disclosure and purposes

We use data to deliver requested features, respond to support and privacy requests, maintain reliability, secure accounts and comply with applicable law. Hosting, storage, email and monitoring providers process the information necessary to provide their services. Google processes the Android SDK diagnostics described above. Providers you choose receive content you explicitly send to them.

We do not sell your saved content or use it for targeted advertising. We may disclose information when legally required, to protect rights and prevent abuse, or as part of a business transfer subject to applicable safeguards and notice. We do not give other Vault users access to your library unless you provide the relevant pairing or recovery credentials.

Retention, deletion and backups

Local data remains until you delete it or remove the app’s local storage. Moving a save to Trash is not permanent deletion. Exports, files in other apps and downloaded copies on other devices must be managed separately. Disconnecting sync, revoking a device or uninstalling the app does not delete the cloud account.

Confirmed cloud-account deletion removes the live account, saved items and attachments and revokes access on all devices. Local downloads remain available until you remove them. Minimal security records, including deletion/revocation markers and identifiers, can be retained to prevent old backups from restoring deleted accounts or revoked access. These records are retained while necessary for that protection; they are separate from saved content.

Scheduled provider snapshots and explicitly managed portable backups use a six-day retention policy. Managed expiry runs hourly, so a cleanup interval may follow expiry. Existing checkpoints adopted on October 28, 2026 have a grace period ending November 3, 2026. Separately retained rollback volumes are not covered by that automated schedule and can remain longer until removed. Deletion does not instantly erase every historical backup. Restoring content must reconcile current deletions and revocations before access is allowed.

Support correspondence and security or legal records are kept only as long as needed for their purposes or applicable obligations. Infrastructure and SDK providers apply their own retention practices. Ask us about deletion of support records or backup-related concerns. See account and data deletion for the in-app and web request paths.

Security and your responsibilities

Hosted sync uses HTTPS in transit, per-device credentials and access controls. It is not end-to-end encrypted: the service can process readable synced content. The “private” label is not a separate encrypted cloud vault and does not exclude a save from sync. Device locking protects access through the app; it is not a promise that every exported file is encrypted.

Exported Vault backups are not encrypted by Vault and may contain private or trashed items. Store them securely. Device revocation prevents future sync but cannot remotely erase downloaded copies. No system can guarantee absolute security; keep your device updated and recovery kit protected.

Your choices and privacy rights

You can use local features without a cloud account, choose whether to sync, revoke devices, disable AI assistance, revoke permissions, export supported library data, delete saves and request account deletion. Depending on your location, you may have rights to access, correct, export or delete personal information, restrict or object to processing, withdraw consent, appeal a decision, or complain to a data-protection authority. Contact admin@jtrlabs.com to exercise applicable rights; we will respond within applicable legal deadlines.

Where relevant, processing is based on providing the service you request, your consent to optional cloud synchronization, legitimate interests in security and reliable operations, or legal obligations. Withdrawing consent does not undo processing already completed. We may need proportionate proof of control of a recovery-key account before acting; an email address alone does not establish ownership. We cannot retrieve local-only content from your device.

International processing and children

We are based in the United States. Our providers may process information in the United States and other countries where they operate. Applicable protections may differ by location; legally required safeguards apply to transfers.

Vault is a general-purpose productivity app and is not directed to children under 13. We do not knowingly seek personal information from children under 13. If you believe a child has provided us information, contact us so we can assess and address the request. Where a higher age or parental authorization is required by local law, that requirement applies.

Changes and contact

We will update the date on this policy when it changes and provide additional notice or seek consent for material changes where required. A policy update alone does not authorize new optional data collection.

JTR Labs LLC · United States
admin@jtrlabs.com
Identify “Vault privacy” in your message so we can direct it correctly.