Privacy Policy

Last updated: September 27, 2026

Plain-English summary.PixoVault stores your account, your projects, and the photos you upload so the app can show them back to you across devices. Nothing is public unless you publish it to your portfolio. We don't sell your data, don't show ads, and don't use your photos for anything you didn't ask us to.

1. Who we are

PixoVault is operated by Daniel Radut ("we", "us", or "PixoVault"). The PixoVault iOS app and this website (pixovault.app) are the products this policy covers. If you have questions, contact us at hello@pixovault.app.

2. Information we collect

2.1 Information you provide

Account information. Your email address. There is no password: you sign in with a one-time code we email to you.
Profile details. Full name, company name, phone number, and website if you enter them during onboarding or in Settings.
Project content. Project names, client contact details, addresses, notes, labels, and the photos you upload, including their location metadata if you enable geotagging.
Portfolio content. If you publish a public portfolio, the business details, services, project titles, cities, descriptions, and photos you choose to publish.
Support messages. The conversations you have with us when you contact support or report a problem in the app, and the name, email address, and message you send through the contact form on pixovault.app.
Subscription information. If you upgrade to a paid plan, your purchase is handled by Apple (App Store) or our payments partner. We receive a record of the entitlement (active / expired) but never your payment card details.

2.2 Information collected automatically

Device information. iOS version, app version, and device model, used to keep the app compatible and to fix bugs.
Notification token.Only if you turn on notifications: a token from Apple that lets us send PixoVault news and updates to your iPhone. It's removed when you sign out.
Location. Only if you grant location permission. Used to tag projects with coordinates, sort projects by distance, and (optionally) geotag photos. Location data stays on your device and in your project records.
Crash and diagnostic reports. When the app crashes or hits an unexpected error, it sends a report (the error, the code location, device and app version) to Sentry so we can fix it. Reports carry no account, name, email address, IP address, screenshot, or photo; IDs and email addresses are removed from error text on your device before a report is sent.

2.3 Information we do not collect

We do not use third-party advertising trackers or analytics SDKs.
Face ID is handled entirely by iOS; we never receive biometric data.
We do not sell personal data to anyone.
We do not use your photos to train machine-learning models.

3. How we use your information

To provide the core app: store and sync projects and photos across your devices.
To process subscription purchases and manage entitlements.
To enforce plan limits (e.g. the free-tier project and photo caps).
To send transactional emails: sign-in codes, email-change confirmations, and support replies when you ask for them.
To detect abuse and keep the service running reliably.
To answer your support requests.

4. Your public portfolio

Your projects and photos are private by default. If you turn on your portfolio and publish projects, the details and photos you choose become visible to anyone with your portfolio link (pixovault.app/your-name), and may be indexed by search engines. Client names, client contact details, notes, labels, and exact addresses are never published. You can unpublish a project, hide photos, or take the whole portfolio offline at any time in the app; copies that visitors already saved or that others cached cannot be recalled.

5. Third-party services we share data with

To run PixoVault we use a small set of trusted infrastructure providers. Each handles a specific job:

Supabase: database, sign-in, and file storage. Stores your account, projects, and photos. supabase.com/privacy
RevenueCat: subscription management. Sees an anonymous user ID and your subscription status. revenuecat.com/privacy
Resend: email delivery. Receives your email address to deliver sign-in codes and, if you ask for them, our replies to your support requests. resend.com/legal/privacy-policy
Sentry: crash and error reporting. Receives the de-identified reports described above. sentry.io/privacy
Apple: App Store, in-app purchases, and standard iOS services. Subject to Apple's privacy policy.

We don't share data with anyone else. If that changes, we'll update this list first.

6. How we store and secure your data

Data is stored on Supabase infrastructure with row-level security policies that only allow you to access your own records.
Photos are stored privately and are only readable by your account, except photos you publish to your portfolio.
Data is transmitted over TLS (HTTPS) between your device and our servers.
Recently viewed photos are cached on your iPhone for speed and are removed when you sign out or delete your account.

7. How long we keep your data

We keep your data as long as your account is active. If you delete your account (in Settings → Delete account, or by emailing us), all your projects, photos, profile data, and subscription records are permanently deleted from our active systems within 30 days. Backups age out within 90 days.

8. Your rights

Access. View everything we have about you inside the app, or email us for a full export.
Correct. Edit any project, client, or profile detail directly in the app.
Delete. Delete individual projects/photos in the app, or delete your entire account in Settings.
Cancel a subscription. Manage or cancel in iOS Settings → Subscriptions. Existing data stays in your account.
Data residency, GDPR, CCPA.If you're in a jurisdiction with specific data-rights laws (EU, UK, California), you have the standard rights those frameworks provide. Email us and we'll help.

9. Children

PixoVault is a tool for working contractors and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us so we can remove it.

10. International transfers

Our infrastructure is hosted in the United States. By using PixoVault from outside the U.S., you consent to your data being transferred to and processed there.

11. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top of this page and, for significant changes, notify you in the app or by email.

12. Contact

Questions, requests, or concerns: hello@pixovault.app.