Privacy Policy

Effective date: July 4, 2026. Last updated: July 15, 2026.

This Privacy Policy explains how AyuVault handles information when you use the AyuVault mobile application and related website.

AyuVault is designed as an offline-first personal health records organizer. The core app does not require an account. Your health records are stored locally on your device unless you choose to export, back up, or share them.

1. Introduction & Developer Identity

AyuVault is developed and operated by a team of independent co-developers ("We", "Our", or "Us"). Because AyuVault is designed as a private, decentralized health vault, your privacy is our primary concern. This Privacy Policy explains how data is handled entirely on your device and how limited third-party subscription data is managed.

2. Health Data and On-Device Processing

On-Device Encryption: All health records, lab reports, prescriptions, medicines, and vitals that you enter into AyuVault are stored locally on your device in an encrypted database. The vault encryption key is derived from your 6-digit PIN using PBKDF2-SHA256 key derivation, and encrypted .avault backups are protected with AES-256-GCM encryption using Argon2id-derived keys. We do not host server infrastructure for your health data; therefore, we do not have access to your encryption keys, your PIN, or your records.

Optical Character Recognition (OCR) & Device Capability: Document scanning and medical data extraction are performed entirely on your device using local machine learning models. Your medical documents are never transmitted to our team or any external cloud servers for processing. Please note that the availability, speed, and accuracy of this feature are fully dependent on your individual device's hardware capabilities and processing power.

3. User Responsibilities: Device Security & Data Loss

Device Security & Data Loss: Because your data is entirely localized to your personal device, we are not responsible for any loss, damage, or corruption of data resulting from issues with device safety, compromised device security, physical theft, malware, viruses, or OS failures. Keeping your device physically and digitally secure is entirely your responsibility.

Backup Responsibility: Managing and handling secure data backups is solely the responsibility of the end user managing the device. We do not maintain or recover lost backups.

License Usage: Users are highly encouraged to run only one active software license per single device to maintain optimal app stability and local data integrity.

4. Paid Features: Cloud Backups & Subscriptions

Optional Cloud Backups: For paid users, an optional cloud backup feature is available. These backups are processed directly through standard ecosystem processes using your official Google or Apple account logins. The AyuVault development team holds zero responsibility for the security or retention of these ecosystem files, and absolutely no health data, collection metrics, or backups are stored on AyuVault-owned infrastructure.

Subscription Processing via RevenueCat: For paid users, all subscription management, billing, and transactional data are handled by RevenueCat in compliance with their separate privacy terms and setup. Absolutely no medical records, health information, patient identities, or scanned documents are shared with or exposed to RevenueCat from the AyuVault app.

5. Website Data, Cookies & Analytics

The AyuVault website (ayuvault.com) sets no cookies, runs no analytics scripts, and uses no advertising or tracking technologies. We do not collect, store, or share any information about your visit. If this ever changes, this policy will be updated first and any tracking will remain strictly optional.

6. Data Retention

We retain nothing, because we receive nothing. Your health records exist only on your device and in any backup files you create and store yourself. Uninstalling the app removes its local data from your device (your exported backup files remain wherever you saved them). There is no server-side copy for us to keep or delete.

Most AyuVault health records are stored locally on your device. You can delete profiles and their associated data from inside the app, or remove all local app data by uninstalling AyuVault. If you created Google Drive backup files, you can delete those files directly from your Google Drive.

To request deletion of any AyuVault data associated with support, subscriptions, diagnostics, or cloud backup assistance, email support@ayuvault.com. See our Delete Your Data page for clear deletion instructions.

7. Children's Privacy

AyuVault is intended for use by adults. Parents and guardians may create profiles to organize a child's health records; those records stay on the guardian's device under the same encryption as every other profile. Because we operate no servers for health data, we do not knowingly — or unknowingly — collect personal information from children.

8. Your Rights & Choices

Access, correction, export, and deletion are built into the product rather than handled by request: you can view, edit, export (as PDFs or encrypted backups), and delete any record at any time directly in the app. Because we never receive your health data, there is no personal health data for us to access, sell, share, or breach — and no request process is needed to exercise these rights.

9. Jurisdiction and Compliance

Our team does not operate as a HIPAA-covered entity. AyuVault's architecture follows strict data minimization: the most effective way to protect your health data is for us to never hold it. If you reside in a jurisdiction with stringent privacy regulations — such as the EU GDPR, India's Digital Personal Data Protection Act (DPDP Act, 2023), or state-level health privacy acts — note that your health records remain under your exclusive physical control on your personal device, and we act as neither a data controller nor a processor for them.

10. Changes to This Policy

When we update this policy, we will change the effective date at the top of this page and, for material changes, note the update in the app's release notes. Continued use of AyuVault after an update constitutes acceptance of the revised policy.

11. Contact Our Team

If you have any questions about this Privacy Policy or our on-device data architecture, you can reach out to our development team directly at: support@ayuvault.com.

12. Related pages