Photos
Pictures you pick are copied into the vault and shown only inside it.
Encrypted on your device
The things you'd rather not explain.
Avera Vault is a private vault for your phone. Photos, videos, files, contacts and notes are encrypted before they touch storage, and the passcode that unlocks them never leaves your device.
No ads. No trackers. No profile of you. Read the Privacy Policy — it is short on purpose.
What Avera Vault is
One locked place for the private half of your phone.
You choose what the vault should hold when you first set it up. Avera Vault copies those things into encrypted storage and opens them only while the vault is unlocked — in the app, never in your gallery, never in a preview, never in a shared album.
Videos
Play back in the app without ever writing a readable copy to storage.
Files
Documents, scans and PDFs from anywhere on your device.
Contacts
Names and numbers kept out of the phone book everyone can open.
Notes
Written straight into the vault — there is no draft left behind.
How it protects you
Your passcode is the key. Literally.
Avera Vault does not store a password and check whether you typed it correctly. Your passcode is what mathematically produces the key that unlocks your data. Without it there is nothing to unlock — not for anyone with your phone, and not for us.
- Encrypted before it lands Everything is encrypted with AES-256 on the device, as it is saved.
- Nameless on disk Vault files carry no names, no extensions and no folder structure.
- Locks the moment you leave The key is dropped from memory, and the app hides itself in the app switcher so the preview never shows your vault.
- Unlock with your face or fingerprint Optional, and layered on top of your passcode rather than replacing it.
What happens when you set a passcode
- A key is generated on your phone, at random, once.
- Your passcode wraps it through a slow, deliberately expensive derivation, so guessing is impractical.
- The wrapped key is stored. The passcode itself is not — not on the phone, and not anywhere else.
- Unlocking unwraps it into memory only, for as long as the vault is open.
This is also why we cannot help you back in. If you forget your passcode, the vault cannot be opened by anyone, including us.
Optional account
You do not need an account to use Avera Vault.
Start as a guest and the vault works completely, forever, on that phone alone. An account exists for exactly one reason: so a copy of your vault survives the phone it lives on.
As a guest
Nothing is registered and nothing is sent. Your vault, your passcode and everything in it stay on this device. If the phone is lost, so is the vault — that is the trade you are making, and it is a legitimate one.
With an account
Sign in with Apple or Google and add a phone number so your backup can be identified. That is all an account is: a name tag on an encrypted bundle. It does not unlock anything, and it does not change how the vault behaves day to day.
Signing in does not give us your data.
An account records who owns a backup. It does not give us your passcode,
your key, or any way to read what the backup contains.
See what an account stores.
Encrypted backup & restore
A backup we are not able to read.
When you back up, the vault is packaged the way it already sits on your phone — encrypted. The key is sealed inside the bundle by your passcode before it leaves the device. What arrives on our side is a sealed container and nothing else.
You tap Back up now
Your vault is packaged on the device. Files stay in the encrypted form they are already stored in, and the index that describes them is encrypted too.
The sealed bundle is uploaded
Your passcode and your key are not in it. We can see how large the backup is and when it was made. We cannot see a single file, name, contact or note inside it.
On a new phone, you sign in again
The same Apple or Google identity finds the backup that belongs to you and downloads it.
Your passcode opens it
You type the passcode you already had. If it is right, the vault unpacks onto the new phone. If it is wrong, the bundle stays sealed — there is no reset, no recovery email, no override.
A backup is not a way around a forgotten passcode
A backup restores to your passcode, not around it. Keep the passcode somewhere you trust — it is the only thing that opens either copy.Plainly
What Avera Vault never does.
A privacy app is only as good as the list of things it refuses to do. Here is ours, and the Privacy Policy says the same thing in more careful language.
- No advertising There are no ad networks in the app and nothing to sell advertisers.
- No tracking or analytics SDKs Your behaviour in the app is not measured, bundled or shipped anywhere.
- No selling or sharing your data Not to data brokers, not to partners, not as part of a business deal.
- No reading your vault We do not hold a key, a master passcode, or a backdoor that produces one.
- No hostage-taking You can delete your account and its backup whenever you want, from inside the app. Here is how.
Questions before you trust it with anything?
Fair. Read exactly what is collected, what the rules are, and how to remove your account and everything attached to it.