MantleoPrivacy policy
Mantleo Vault for Android · Effective 31 October 2026
Mantleo Vault ("the app") is made by Mantleo ("we", "us"). This policy explains what the app does with your information. The short version: your documents, photos and details stay encrypted on your phone. We have no servers that receive them, we don't track you, and the app has no ads and no accounts.
1. Information we collect
We don't collect personal information. The app doesn't send your files, document details, usage or identifiers to us, and it contains no analytics, advertising or tracking code.
2. Information stored on your phone
Everything you put in the app is stored only on your device:
| What | How it's stored |
|---|---|
| Photos, videos, files and scanned pages you add | Encrypted (AES-256-GCM) in the app's private storage |
| Document details you enter (type, title, family member, number, dates, notes) | Encrypted, together with the vault's list of items |
| Your unlock pattern | Never stored. Your pattern and a secret held in the phone's Android Keystore are used to derive the encryption keys. |
| Expiry reminder times | Stored unencrypted on the phone so reminders work while the vault is locked, as anonymous codes and times only (no document names). Notifications don't name the document. |
| App settings (for example the wrong-pattern counter, and whether "Read dates from scans" is on) | Stored on the phone |
The app's data is excluded from Android cloud backup and device-to-device transfer. This means there is currently no backup: uninstalling the app, clearing its data or losing your phone deletes your vaults. We can't recover a forgotten pattern or deleted data.
3. Permissions and features
- Photos and files: the app uses Android's photo picker and file picker, so it can only read the items you choose. If you choose "Move into vault", Android asks you to confirm before the originals are deleted.
- Notifications: used only for document expiry reminders.
- Document scanning: the "Scan" button uses Google's document scanner, provided by Google Play services on your phone. Scanned pages are handed to the app, encrypted into your vault, and the temporary copies are deleted.
- Reading dates from scans (optional, off by default): uses Google ML Kit text recognition, which runs on your phone without an internet connection. The recognised text is used only to suggest issue and expiry dates and isn't stored or sent anywhere.
- Restore, and "Open with…": when you restore an item or open it in another app, a decrypted copy leaves the vault at your request. That copy is then handled by your phone or the other app, outside this policy.
4. Third-party services
The app doesn't share your information with third parties. Two components come from Google and run on your phone: the document scanner (Google Play services) and ML Kit text recognition. According to Google, they process images on the device; Google may collect limited technical information about how these components perform, but not your images or text. See Google's ML Kit terms and Google's privacy policy.
When you download the app, Google Play handles the download under Google's own terms. If you've allowed your phone to share diagnostics with Google, Google Play may show us anonymous, aggregated crash and performance statistics. These contain none of your vault contents.
5. Children
The app isn't directed at children under 13, and we don't knowingly collect information from anyone.
6. Your choices and deleting your data
You control your data: delete items or documents inside the app, or uninstall the app to delete everything. Because we don't hold any of your data, there's nothing for us to delete or export on request.
7. Security
Your vault is protected with standard encryption (AES-256-GCM, with keys derived using PBKDF2 and HKDF) and a secret kept in the phone's Android Keystore. The app blocks screenshots and locks when you leave it. No method of protection is perfect; please use a pattern others can't easily guess or see.
8. Changes
If this policy changes, we'll update this page and the date above. If a future feature (such as optional encrypted family sharing) changes what leaves your phone, we'll explain it here and in the app before it takes effect.
9. Contact
Questions or requests: hello@mantleo.com