Privacy Policy
Last updated: May 14, 2026
1. Who we are
PixoVault is operated by Daniel Radut ("we", "us", or "PixoVault"). The PixoVault iOS app and this website (pixovault.app) are the products this policy covers. If you have questions, contact us at hello@pixovault.app.
2. Information we collect
2.1 Information you provide
- Account information. Email address and a password (hashed, never stored in plaintext) when you sign up.
- Profile details. Full name, company name, phone number, and website if you enter them during onboarding or in Settings.
- Project content. Project names, client contact details, addresses, notes, labels, and the photos you upload — including their location metadata if you enable geotagging.
- Subscription information. If you upgrade to a paid plan, your purchase is handled by Apple (App Store) or our payments partner. We receive a record of the entitlement (active / expired) but never your payment card details.
2.2 Information collected automatically
- Device information. iOS version, app version, device model — sent with API requests to help us debug and improve the app.
- Location. Only if you grant location permission. Used to tag projects with coordinates, sort projects by distance, and (optionally) geotag photos. Location data stays on your device and in your project records.
- Crash and diagnostic logs.We may collect anonymized crash reports through Apple's standard mechanisms to fix bugs.
2.3 Information we do not collect
- We do not use third-party advertising trackers.
- We do not sell personal data to anyone.
- We do not use your photos to train machine-learning models.
3. How we use your information
- To provide the core app: store and sync projects and photos across your devices.
- To process subscription purchases and manage entitlements.
- To enforce plan limits (e.g. the free-tier project and photo caps).
- To send transactional emails (account confirmations, password resets) if you've enabled them.
- To detect abuse and keep the service running reliably.
4. Third-party services we share data with
To run PixoVault we use a small set of trusted infrastructure providers. Each handles a specific job:
- Supabase — database and file storage. Stores your account, projects, and photos. supabase.com/privacy
- RevenueCat — subscription management. Sees an anonymous user ID and your subscription status. revenuecat.com/privacy
- Apple— App Store, in-app purchases, and standard iOS services. Subject to Apple's privacy policy.
We don't share data with anyone else. If that ever changes (e.g. we add error monitoring), we'll update this list and notify users.
5. How we store and secure your data
- Data is stored on Supabase infrastructure with row-level security policies that only allow you to access your own records.
- Photos are stored in Supabase Storage with the same scoping — your photos are only readable by your account.
- Data is transmitted over TLS (HTTPS) between your device and our servers.
- Passwords are hashed using industry-standard algorithms; we never see the plaintext.
6. How long we keep your data
We keep your data as long as your account is active. If you delete your account (in Settings → Delete account, or by emailing us), all your projects, photos, profile data, and subscription records are permanently deleted from our active systems within 30 days. Backups age out within 90 days.
7. Your rights
- Access. View everything we have about you inside the app, or email us for a full export.
- Correct. Edit any project, client, or profile detail directly in the app.
- Delete. Delete individual projects/photos in the app, or delete your entire account in Settings.
- Cancel a subscription. Manage or cancel in iOS Settings → Subscriptions. Existing data stays in your account.
- Data residency, GDPR, CCPA.If you're in a jurisdiction with specific data-rights laws (EU, UK, California), you have the standard rights those frameworks provide. Email us and we'll help.
8. Children
PixoVault is a tool for working contractors and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us so we can remove it.
9. International transfers
Our infrastructure is hosted in the United States. By using PixoVault from outside the U.S., you consent to your data being transferred to and processed there.
10. Changes to this policy
If we make material changes, we'll update the "Last updated" date at the top of this page and, for significant changes, notify you in the app or by email.
11. Contact
Questions, requests, or concerns: hello@pixovault.app.