The short version
MomentVault does not collect your data. There is no account, no sign-in, no analytics, no advertising, and no tracking of any kind. Everything the app archives stays in private storage on your device. The app makes exactly one kind of network request, and it is to Google Play to check whether you have an active subscription.
1. Who we are
MomentVault is published by Rhythm Themes. For any privacy question, contact apps.rhythmthemes@gmail.com.
MomentVault is an independent application. It is not affiliated with, endorsed by, sponsored by, or connected to WhatsApp LLC, Meta Platforms, Inc., or any other messaging service.
2. What we collect
Nothing. We operate no servers, no accounts and no backend. We cannot see your archive, your device, your usage, or your identity, because none of it is ever transmitted to us.
Specifically, MomentVault contains no analytics SDK, no crash-reporting SDK, no advertising SDK, no attribution or install-referrer SDK, and no social SDK.
3. What the app stores on your device
All of the following is written to MomentVault's private app storage, which other apps on your device cannot read:
| What | Where | Why |
|---|---|---|
| Copies of status media you archive | app-private vault/ folder | so a status survives after it expires |
| Creator Studio exports | app-private exports/ folder | your edited images and clips |
| An index of archived items | app-private database | dates, media type, file size, favourites |
| A sender label | app-private database | groups moments by person |
| Your settings | app-private preferences | theme, App Lock, notifications, folder grants |
Two points worth stating plainly:
- Sender identifiers are hashed. The app derives a SHA-256 hash to group a person's moments together. Where a display name is available it is stored so the timeline is readable, and you can change it at any time. No phone number is stored.
- We never see any of it. This data is on your device only.
4. Access to your files
MomentVault does not request broad storage permission. It does not declare READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE or MANAGE_EXTERNAL_STORAGE.
Instead it uses Android's Storage Access Framework. You pick one folder using the system's own folder picker, and Android grants the app access to that folder and nothing else. The grant persists across restarts so background archiving can work, and you can withdraw it at any time from Settings → Storage → Folder access → Revoke, or from Android's own settings.
The app can only archive media your device has already downloaded into the folder you chose. It cannot read your messages, it cannot see statuses you have not viewed, and it cannot recover anything that expired before you installed it.
5. Permissions, and why each one exists
| Permission | Why |
|---|---|
INTERNET | Google Play Billing only |
com.android.vending.BILLING | subscription purchases and entitlement checks |
POST_NOTIFICATIONS | optional "N new moments archived" notification |
RECEIVE_BOOT_COMPLETED | re-arm background archiving after a restart |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC | let an archive sweep finish reliably |
USE_BIOMETRIC, USE_FINGERPRINT | optional App Lock |
WAKE_LOCK, ACCESS_NETWORK_STATE | required by Android's WorkManager, which schedules the sweep |
The last three rows are added automatically by Google's own AndroidX libraries. All are "normal" permissions that do not prompt you.
6. Biometrics
If you turn on App Lock, unlocking uses Android's BiometricPrompt with your fingerprint, face or device PIN. Your biometric data never leaves the secure hardware on your device, is never accessible to MomentVault, and is never stored by us. The app only receives a yes-or-no result.
7. Payments and subscriptions
MomentVault Pro is a subscription sold and processed by Google Play.
- We never see, receive or store your payment details.
- The app asks Google Play whether your subscription is active, and records a single true/false flag on your device so it works offline.
- Google's handling of your purchase is governed by the Google Privacy Policy and the Google Play Terms of Service.
This is the only third party the app communicates with.
8. Backups and moving to a new phone
- Cloud backup: MomentVault excludes everything from Android's cloud backup — archived media, thumbnails, exports, the database and your settings. None of it is uploaded to Google's backup servers.
- Device-to-device transfer: if you move to a new phone using Android's direct transfer, your archive and settings move with you. That transfer is between your two devices; it does not pass through us.
9. Saving and sharing
Anything that leaves the app does so because you tapped a button:
- Save to Gallery copies a moment into your device's public gallery through Android's MediaStore. (Requires Android 10 or later, because doing it on older versions would need the broad storage permission we deliberately do not request.)
- Share hands a temporary, read-only reference to the app you choose. Whatever that app does with it is governed by *its* privacy policy, not ours.
10. Children
MomentVault is not directed at children under 13 and we do not knowingly collect data from anyone — including children — because we do not collect data at all.
11. Your rights and your control
Because we hold no data about you, there is nothing for us to export, correct or delete on your behalf. You retain complete control on the device:
- Delete individual moments, or many at once, from the gallery.
- Clear generated thumbnails in Settings → Storage → Clear thumbnail cache.
- Revoke folder access in Settings → Storage → Folder access.
- Uninstalling MomentVault permanently removes the entire archive, the index and all settings from your device.
To cancel a subscription, use your Google Play account. Uninstalling the app does not cancel a subscription.
12. Security
Your archive lives in app-private storage, which Android isolates from other applications. You can add App Lock for biometric or PIN protection. Because nothing is transmitted, there is no server-side breach that could expose your archive.
We cannot protect against a device that is itself compromised — a rooted phone, malware with elevated privileges, or someone with your unlocked device.
13. Changes to this policy
If this policy changes materially we will update the effective date above and publish the new version at this URL before the change takes effect. Continued use after that constitutes acceptance.
14. Contact
Email apps.rhythmthemes@gmail.com. Published by Rhythm Themes.
We answer privacy questions at the same address as general support.
No comments:
Post a Comment