Privacy Policy

Effective date: 17 October 2026

Black Flame Digital LTD ("we", "us", "our") respects your privacy. This Privacy Policy explains how we handle information in the Expiry Vault mobile application (the "App").

The App keeps your documents on your device. It has no account, no analytics, no advertising and no tracking, and we never receive your documents, scans, names or dates.

1. Information We Collect

Information that stays on your device. The following is stored only on your device, in an encrypted database whose key is held by your device's secure hardware (the iOS Keychain or the Android Keystore). It is not sent to us or to anyone else.

Documents you add, with their details, issue and expiry dates, renewal history and notes.
The names of people and household members you add.
Reminder settings and the app lock setting.
Document images, but only if you turn on "Keep the image". Each image is stored encrypted.

Scanning and text recognition. When you scan a document, or import a photo or PDF, text is read on your device by Apple's Vision framework on iPhone or Google's ML Kit on Android. Neither sends your images or text anywhere. On Android, the camera scanner is provided by Google Play services and runs on your device. Scan images are deleted once they've been read, unless you choose to keep them.

Purchase information. If you subscribe to Premium:

On iPhone, the App Store processes your payment and your device checks your subscription with Apple directly. We receive nothing.
On Android, Google Play processes your payment. The App contacts our server only if you subscribe or restore a purchase; if you never do, it never contacts our server. To confirm a purchase, it sends:
- the purchase token Google Play issues;
- the subscription product;
- a random identifier created for your installation of the App.
Our server checks the purchase with Google. It stores the subscription's status and end date, a scrambled (hashed) copy of the purchase token, and an encrypted copy of the token so it can be checked again later. None of this includes your name, email address or any document information. We never see your payment details.

Support communications. If you email support, we receive your email address and the contents of your message.

2. How We Use Information

We use information to:

Run the App's features on your device, including reminders, widgets, the app lock and encrypted backups.
Confirm Premium subscriptions, restore them on a new installation, and prevent misuse of purchases.
Respond to support emails.

3. Features That Work Outside the App

Some features necessarily make limited information visible outside the encrypted database:

Notifications. Reminders are scheduled on your device. By default they don't name the document; you can choose to show document names on the lock screen in Settings.
Home-screen widgets. To display on your home screen, widgets keep a small copy of upcoming expiry dates outside the encrypted database. Document names are included only if you turn this on in Settings.
Backups. If you create a backup, it's a single file encrypted with a password you choose, saved wherever you pick (for example, Files, a computer or cloud storage you use). We never receive it and can't recover your password. The App's data is excluded from iCloud and Android device backups.
App lock. Face ID, Touch ID and fingerprint checks are carried out by your device's operating system. The App only learns whether the check succeeded, and never receives biometric data.

4. Legal Bases

Where data protection law applies (including the UK GDPR), we process purchase information because it's needed to provide the subscription you bought (performance of a contract), and for our legitimate interest in preventing fraud and misuse. We process support emails to respond to you.

We do not sell your personal data. Information is shared only with these service providers, each of which handles it under its own privacy policy:

Apple App Store and Google Play to process purchases and manage subscriptions. Google Play receives a scrambled form of your installation's random identifier when you buy, which lets Google link the purchase to your installation without identifying you.
Supabase, which hosts our server and database for Android purchase verification. Like most hosting providers, it keeps short-term request logs that include IP addresses. For rate limiting, we use only a scrambled form of your IP address.

6. Data Storage and Retention

Information in the App stays on your device until you delete it, use Settings › Delete everything, or uninstall the App.
Purchase records on our server are kept while your subscription is active. They're deleted automatically 12 months after it ends, which allows refunds and disputes to be handled.
Installation identifiers that have no purchase are deleted automatically after 90 days without contact.
Settings › Delete everything deletes your installation's records from our server straight away, when your device is online. Otherwise they're deleted automatically as above.
Purchase records are also retained by the app stores as required for billing and compliance.
Support emails are kept as long as needed to resolve your request.

7. Your Choices and Rights

You can delete any document, or delete everything the App stores on your device, at any time. Delete everything also deletes your installation's purchase records from our server.
You can keep or remove document images, and choose whether names appear in notifications and widgets.
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, and to complain to a data protection authority. In the UK, that's the Information Commissioner's Office (ico.org.uk).
Our purchase records aren't linked to your name, email address or anything else that identifies you, so we usually can't tell which record is yours. You can delete them yourself with Delete everything, and they're also deleted automatically, as described in section 6. Contact us if you have a question about your data.

8. Children

The App is intended for adults managing their own and their household's documents. It is not intended for children under 13, and we do not knowingly collect personal data from children.

9. Security

Your data is encrypted on your device. The App blocks screenshots of its screens on Android by default, and hides its contents in the app switcher. Our server stores purchase tokens only in scrambled or encrypted form, and apps can't access its database directly. We take reasonable measures to protect data but cannot guarantee absolute security.