Privacy policy

Who is responsible

Stewart Smith, trading as Made by SWCS, provides this app and handles information sent to its support service. For privacy questions or requests, email support@madebyswcs.com and name the app. We cannot remotely read or recover records that stay only on your device.

This policy covers the current device app and its support service. Websites, Apple services and other external services you choose have their own privacy information. There is no Made by SWCS account required to use this app.

Scope and your device vault

This policy covers the current bundled Vaulted iPhone and iPad app. An earlier hosted browser version has different cloud behaviour and is not described as offline by this policy. Belongings, rooms, values, notes, policy documents, photos, videos, trip lists and preferences are stored in the app’s protected local storage. Normal use needs no account or web server. New vault records are not synchronised to a cloud service, and analytics and advertising are disabled in this device build.

Documents and media may contain home addresses, policy numbers, financial details, faces or image metadata. Vaulted does not promise to strip all metadata from every imported file. Consider what a file contains before adding it or sharing an export.

Recognition, files and permissions

PDF text extraction, photo OCR/classification and sampled video analysis run on device using Apple frameworks. Documents and media are not sent to a remote AI service. Suggested matches and policy details are aids for your review, not decisions about insurance eligibility or coverage.

Camera, photo-library and file access are used when you choose to add media. You control permissions in iOS Settings. System pickers may download selected files from iCloud or another storage provider. An export goes through the system share sheet to the destination you choose. Support and policy links open a web page and therefore make network requests.

Migration from older installations

An upgrade may copy an earlier browser-based vault into the current local store. Previously cloud-only attachments can require a one-time authenticated download from the earlier Supabase service, using the existing session. That service receives the authentication and network information needed for the download. A previous development installation may also need access to its old local-network origin.

Earlier local and cloud copies are retained during migration to avoid discarding data. Deleting the active vault does not automatically delete those copies or an earlier account. Contact support about earlier cloud data and identify the old account without sending its password. Supabase privacy information: https://supabase.com/privacy.

Exports, retention and deletion

Active vault records remain until you remove them, delete the active vault in Settings, or delete the app. Deleting the app removes its local container, including retained local migration copies. Offloading preserves documents. Do not reinstall as a troubleshooting step before securing any copy you need.

Exports may contain sensitive policy documents, home inventories, values and trip details. They are not protected by the app once shared; do not assume an export is password-protected or encrypted by Vaulted. Check its contents and destination. Export is supported; the current app does not provide an in-app restore workflow.

Apple may include app data in device backups according to your settings. Exports, device backups and earlier cloud records need to be managed separately. Deleting a local item does not erase these other copies, and we cannot retrieve device-only records from a server.

Support and TestFlight feedback

If you contact support, we receive your email address, any name you provide, your message, attachments and the app/device details you choose to include. We use them to reply, investigate faults, maintain the app and handle privacy requests. Supplying them is optional, but we may be unable to investigate a problem without enough detail. Support is not a marketing mailing list.

Namecheap forwards mail sent to support@madebyswcs.com to a Gmail inbox operated by Stewart Smith. These email providers process message contents, delivery information and spam/security signals. Avoid sending passwords, identity documents, complete backups, precise personal locations or sensitive documents unless they are needed and you intend to share them. Redact screenshots where possible.

Apple may provide us with TestFlight feedback, screenshots, crash reports and device or app diagnostics according to your testing and sharing settings. Feedback can include contact details and whatever is visible in a screenshot. Apple also processes App Store distribution, purchase and diagnostic information under its own terms. We do not receive your Apple password or full payment-card details.

Why we use information

App records are processed locally to provide the features you choose. Where UK or EEA data-protection law applies to information we receive, we rely on our legitimate interests in answering support requests, resolving faults and keeping the service secure; on providing a requested service where necessary to perform a contract; and on legal obligations where we must retain or disclose information. We use consent where required for optional processing.

Device permissions are choices you control in Settings. Withdrawing a permission stops future use of that permission, but does not erase records already saved or copies you have shared. Where we rely on consent, you can withdraw it without affecting processing that was lawful beforehand. No account, advertising identifier, cross-app tracking or behavioural advertising is used in the current device app. We do not sell personal information or share it for targeted advertising.

Support records and provider retention

We keep support correspondence for as long as needed to resolve the request, follow up a related problem, maintain a useful record of the resolution, or handle a legal obligation or dispute. The type and sensitivity of the information, whether the issue is still open, and whether the same purpose can be met with less information determine retention. Unnecessary attachments can be removed separately. Ask us to delete support information you no longer want us to hold; we will explain any reason we must keep part of it.

There is no automatic expiry date for support email at present. Mail-provider backups, spam/security records and Apple-held diagnostics follow those providers’ retention and deletion processes. Deleting the app does not delete correspondence, TestFlight feedback, exports or provider-held records. Contact us for information we hold and the relevant provider for information it controls.

Service providers and international processing

Our email providers and the providers described in this policy may process information in the United States and other countries outside your country, including outside the UK or EEA. Their locations, legal roles, retention and transfer arrangements depend on the service. We do not promise that all processing stays in your country.

Google describes its use of adequacy decisions, the EU–US Data Privacy Framework and UK extension, and standard contractual clauses where applicable at https://policies.google.com/privacy/frameworks. The other providers explain their arrangements in the policies linked below. Contact support to ask about a particular recipient, international transfer or available safeguard; this notice does not claim that every provider uses the same mechanism.

We do not routinely disclose your support information to others beyond the services needed to handle it. Information may also be disclosed when required by law or reasonably necessary to address abuse, protect people, or establish or defend legal claims. We limit such disclosures to the relevant information.

Security and your copies

The apps use iOS app storage and platform security; the website uses HTTPS. No device, email service or transmission can be guaranteed completely secure. Protect your device and Apple account, keep software updated, and review the destination before sharing an export or screenshot. A copy sent to another person or service is outside the app’s deletion controls. We do not describe ordinary email or exported files as end-to-end encrypted.

Your rights and requests

Depending on where you live and the applicable law, you may request access to personal information we hold, correction, deletion, restriction, or a portable copy. You may withdraw consent where it is the basis for processing. These rights have limits, for example where a record is needed to meet a legal obligation or defend a claim. We do not use automated decisions or profiling that produce legal or similarly significant effects.

Email support@madebyswcs.com with the app name and your request. Contact us from the address used for support when possible. We may ask for proportionate information to verify a request, but do not send identity documents unless specifically needed. We respond within applicable legal time limits and explain any permitted extension or refusal. We cannot retrieve or erase app records held only on your device; use the app controls described above.

You can complain to the UK Information Commissioner at https://ico.org.uk/make-a-complaint/ or to the data-protection authority where you live or work. You do not have to contact us first. Applicable privacy rights are available without discriminatory treatment.

Your right to object

You may object to processing based on legitimate interests by emailing support@madebyswcs.com and explaining your circumstances. We will consider the objection and stop that processing unless an applicable legal exception allows it to continue. We do not send marketing messages or use your information for targeted advertising.

Children and information about other people

These are general-interest apps. We do not ask for a child’s age, require registration, or knowingly request children’s personal records through support. A parent or guardian should help a child decide what to share with support, TestFlight or external services. Contact us if you believe a child has sent personal information that should be removed.

Only add or share photographs, documents and details about other people when you have the right to do so. Local storage does not make an exported or emailed copy private.

Provider privacy information

Apple: https://www.apple.com/legal/privacy/
Namecheap email forwarding: https://www.namecheap.com/legal/general/privacy-policy/
Google email: https://policies.google.com/privacy
Website and support notice: https://madebyswcs.com/privacy/

Policy changes

The date above identifies this policy version. Updates will be published on this page and included in a future app update where relevant. Material changes to collection or sharing will be explained through the website or app, and permission will be requested where required. The current policy does not authorise undisclosed future collection.