// PRIVACY POLICY · EFFECTIVE 2025-10-01

Privacy Policy

For MrTrust Vault (Android package com.mrtrust.docvault) · Effective date: 2025-10-01 · Last updated: 2026-10-08

1. Summary

Your vault files stay on your device. Documents, scans, PDFs, categories, tags, notes and reminder settings are created, stored and processed in app-private storage on your Android phone. The vault features have no user accounts and no document sync, and scanned documents are never uploaded by the app.

2. Data controller & contact

The app publisher and data controller is MrTrust.

If you email us, we use your message only to answer you and delete it when it is no longer needed.

3. What data the app handles

The app processes only the content you put into it, exclusively on your device:

CategoryExamplesWhere it lives
Document filesScanned page images, imported PDFs, generated PDFs, thumbnailsApp-private device storage
Document metadataTitles, categories, tags, notes, expiration datesOn-device database
App settingsReminder timing, theme, locale preferencesOn-device preferences
Reminder stateScheduled alarm times, delivered-reminder flagsOn-device database / system alarm manager

Lawful basis (GDPR, where applicable): the processing happens locally at your direction when you use the app's core vault functionality (contract / legitimate interest in providing offline features you requested). No personal data is transmitted to the controller.

4. On-device vault processing & storage

5. App services

To improve our advertising campaigns, we may use AppsFlyer and OneSignal. These services may process technical data about your device and app usage, including your advertising ID (AppsFlyer) and your IP address, which can reveal your approximate location; they never receive your documents or their contents. See AppsFlyer Privacy Policy and OneSignal Privacy Policy.

You can reset or delete your advertising ID at any time in Android settings: Settings → Privacy (or Security & privacy) → Ads → Reset advertising ID or Delete advertising ID (wording and steps vary by Android version and manufacturer). Deleting it replaces it with zeros; resetting gives you a new one.

6. What the vault does not collect

Note: if you open the in-app Privacy Policy viewer, that viewer is a standard Android WebView that loads this page from jokoshh.online. Standard browser networking (DNS/TLS) applies while loading the page; the app itself appends nothing to the request.

7. Device permissions

The app declares only the permissions below, each used solely for the purpose described:

PermissionPurpose
Camera (via the system document scanner; no CAMERA permission retained)Photograph paper documents when you choose “Scan document” through the Play-services scanner flow. Images stay on-device.
Notifications (Android 13+)Show expiration reminders and test reminders you request. Can be revoked anytime in system settings.
Exact alarms (SCHEDULE_EXACT_ALARM, where granted)Deliver reminders at the precise configured time, including while idle. Falls back to inexact alarms if not granted.
Boot completed (RECEIVE_BOOT_COMPLETED)Re-schedule reminders after reboot, time change or app update.
Vibrate (VIBRATE)Notification haptics for reminders.
Media / file access (photo picker, file picker, WebView file chooser)Import PDFs or page images you explicitly select. Only the files you pick are read.
Internet (INTERNET)App services and this privacy-policy page. Vault document features transmit nothing.
Network state (ACCESS_NETWORK_STATE)Observe connectivity before using network features.

Denying an optional permission only disables the feature that needs it; the rest of the vault keeps working. The vault never requests root, device-admin or other special access.

8. Sharing & transfers

9. Retention & deletion

10. Children

The app is a general-purpose document utility with no age gate, accounts or content of its own. The vault itself collects nothing; parents or guardians manage the device and its contents.

11. Security

Documents are protected by Android's app sandbox: other apps cannot read the vault unless you share or export a file to them. Standard device hygiene applies — keep a screen lock, OS updates and be careful with whom you share exported copies, since a shared copy is outside the app's control.

12. Your rights

Because vault content stays on your device under your direct control, you can access, correct, export and erase it yourself at any time inside the app — no request needed. If privacy law in your region grants additional rights (access, rectification, erasure, restriction, portability, objection), and you believe we hold data about you (e.g. a support email), contact privacy@jokoshh.online and we will respond. You also have the right to lodge a complaint with your local supervisory authority.

13. Changes to this policy

If the app or the law changes, we will update this page and the in-app policy together, and revise the “Last updated” date above. Because the app works offline, please check this page occasionally. Continued use of the app after an update takes effect constitutes acceptance of the revised policy.


Questions about this policy? Contact privacy@jokoshh.online. General help: support@jokoshh.online.

← Back to MrTrust Vault home