Privacy

Privacy policy

19 October 2026

zyvault is an Android app for keeping a record of your own money in rupees. It does not send, receive or hold money. This page says what is stored, what stays on the phone, and how to delete an account.

Who we are

zyvault is published at zyvault.clawdage.com. Questions about this policy, and requests to delete an account, go to hello@clawdage.com.

The account

You sign in with an email address. zyvault emails you a one-time code. There is no password. The account is that email address, plus a session kept on the phone so you stay signed in.

What is stored for you

After you confirm a line, the server stores the records you create:

• Accounts you add, and the transactions, categories and notes on them.
• Budgets, savings goals, planned payments and who owes whom.
• A push token for this phone, if reminders from the server are turned on.

Those records are sent over HTTPS and kept in a database so the same account can open them again. They are not sold, and they are not used for ads. zyvault does not show ads.

Voice and bill photos

The microphone is optional. Speech is turned into text by the speech service on the phone. zyvault then sends that text, not a recording, to read the amount, category and date. Nothing is saved until you confirm the line.

The camera and photo library are optional. If you attach a bill, receipt or PDF, that file is sent so the amount and merchant can be read. The image is used for that reading and is not kept as a photo in your account. The text you confirm is what gets saved.

Reading a line or a bill can pass through an AI provider (Google, Groq or OpenRouter, whichever is configured). That provider sees the text or the bill for the request. It does not receive your account email as part of the bill.

What stays on the phone

• Bank message notifications and alerts from GPay, PhonePe, Paytm, BHIM and CRED. These stay off until you turn them on in Profile. The text is read on the phone to notice a payment. It is not uploaded.
• Senders you mark as spam, and the fingerprint or face unlock setting. Unlock uses the phone’s own lock. zyvault does not receive your fingerprint.
• The sign-in session.

Notification access is a phone setting. Android can block it for an app installed outside the Play Store until you allow restricted settings. zyvault uses it only to notice a payment you can then confirm.

Who else handles data

• The database that stores your account and records.
• The email service that delivers the sign-in code.
• An AI provider, only when you ask zyvault to read a line or a bill.
• Firebase Cloud Messaging, only if a push token is registered, to deliver a reminder.

Bank logo pictures are ordinary images. They are not your transactions.

Delete your account

Email hello@clawdage.com from the address you use to sign in. Use the subject “Delete my account”.

That request deletes the account and the records stored for it: transactions, accounts, budgets, goals, plans, debts and the push token. Sign-in codes expire on their own and are not kept as a password. You can sign out in the app at any time. Signing out stops this phone from receiving that account’s reminders. It does not delete the records.

Children

zyvault is for adults. It is not directed at anyone under 18, and we do not knowingly create accounts for children.

Changes

If this policy changes, the date at the top of this page changes with it. The current version is always at this address.