Last updated: May 9, 2026 · Effective for AstraVault v1.0 and above
AstraVault is a product of AstraSoft, registered in India. AstraSoft is responsible for processing your personal data in accordance with applicable privacy laws.
AstraVault is a client-side-only application. AstraSoft has zero access to your unencrypted documents at any time. Every file is encrypted with AES-256-GCM on your device — inside the Android hardware security enclave — before any data leaves your phone. We cannot read your documents even if legally compelled, because we never possess the decryption keys.
This is not a policy promise. It is a technical guarantee: your encryption key is derived from your passphrase using PBKDF2-SHA512 (600,000 iterations) and bound to your Android Keystore hardware. AstraSoft's servers never receive it.
| Data | Purpose | Where stored | Status |
|---|---|---|---|
| Google Account email | Sign-in identity, Drive access, account identification | Firebase Firestore (your user profile) | Required |
| Google Drive access | Store your encrypted documents in your own Drive | Your personal Google Drive (app-scoped) | Required |
| Encrypted metadata | Document name, category, upload date, OCR snippet (≤500 chars), masked entities | SQLCipher DB on your device only | Required |
| Subscription status | Determine Free or Pro tier access | Firebase Firestore (your profile) | Required |
| Crash reports | Identify and fix app crashes | Firebase Crashlytics (Google) | Opt-in |
| Anonymous usage analytics | Understand how features are used to improve the app | Firebase Analytics (Google) | Opt-in |
| Document content (photos, PDFs) | — | — | Never collected |
| Biometric data (fingerprint images) | — | — | Never collected |
| Passphrase or encryption keys | — | — | Never collected |
Opt-in analytics and crash reporting are controlled via Settings → Consent Manager. Both default to OFF on first launch.
AstraVault uses a two-factor authentication model combining a passphrase with device biometrics:
Document content is treated as ephemeral in memory and is never written to disk in plaintext:
ByteArray.fill(0)) after the encryption step completes.Encrypted document files (AES-256-GCM ciphertext) are stored in your personal Google Drive using the Drive API with app-specific scope (drive.file). AstraSoft's servers are not an intermediary — your device uploads directly to your Drive using your OAuth token. AstraSoft has no standing access to your Drive files.
Only the encrypted ciphertext is uploaded. The decryption key never leaves your device. If AstraSoft were ever to receive a request for your Drive files, we would be unable to decrypt them.
When OCR detects a 12-digit national ID pattern, the first 8 digits are automatically replaced with asterisks before the text is stored anywhere — in the local SQLCipher database, in the OCR snippet, and in any search index. This masking is irreversible and happens automatically before any data is stored.
PAN card numbers are similarly masked. The original, unmasked number is never stored in plaintext by AstraVault — it exists only in the encrypted document file (your Drive) and briefly in camera RAM during capture before being zeroed.
AstraVault is built with privacy as a core principle. You have the following rights regarding your personal data:
AstraVault integrates the following third-party services. Their respective privacy policies govern their own data handling:
| Service | Purpose | Data shared |
|---|---|---|
| Google Firebase Auth | User sign-in (Google account) | Google account email, UID |
| Google Firestore | User profile, subscription, consent records | Email, tier, consent flags |
| Firebase Crashlytics | Crash reporting (opt-in only) | Stack traces, device model, OS version — no document data |
| Firebase Analytics | Anonymous feature usage (opt-in only) | Event names, session duration — no personal identifiers, no document content |
| Firebase Cloud Messaging | Push notifications (security alerts, sync status) | FCM device token |
| Google Play Integrity (App Check) | Verifies app authenticity before Firestore requests | Device attestation token (no personal data) |
| Google Drive API | Encrypted document storage in your personal Drive | Encrypted ciphertext only — AstraSoft cannot decrypt |
| Google ML Kit (on-device) | OCR text recognition (English + Hindi) | Runs entirely on-device — no data sent to Google |
| Google Play Billing | Pro upgrade purchase | Handled by Google Play — AstraSoft receives purchase confirmation only |
| Google AdMob | Optional rewarded ads (Ad Boost feature) | Ad identifiers per Google's privacy policy — watching ads is always optional |
| Data | Retention period |
|---|---|
| Encrypted Drive files | Until you delete them (you control your Drive) |
| Local SQLCipher metadata | Until you delete your account or perform a vault reset |
| Firebase user profile (email, tier) | Deleted within 30 days of account deletion request |
| Consent records | 5 years (regulatory compliance requirement) |
| Firebase Crashlytics data | 90 days (Google's Crashlytics policy) |
| Firebase Analytics data | 14 months (Google's Analytics default) |
AstraVault is not directed at children under 18. We do not knowingly collect personal data from minors. Users under 18 must have verifiable parental consent before use. If you believe a minor has created an account without parental consent, contact us at info@astravault.co.in for immediate account deletion.
We will notify you of material changes to this policy via push notification and an in-app banner at least 7 days before the change takes effect. For non-material changes (contact information updates, clarifications), we will update the "Last updated" date and notify you at next launch. Your continued use of AstraVault after the effective date constitutes acceptance of the revised policy.
To exercise your data rights, request deletion, file a grievance, or ask any privacy question: