This Privacy Policy explains how 333i LLC (“we,” “our,” or “us”) collects, uses, and protects your personal information when you use Infinity Vaults (formerly Infinity Vaultz) (the “App”) or visit our website at www.infinityvaults.com. By using the App or the Website, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following types of information when you use the App or visit our website:

• Personal Data: We do not collect any personal data directly. However, if you choose to log into third-party services like Google Drive or Dropbox, we store the cloud service account IDs, login tokens, and references to the files you upload or access from these services.
• Anonymous Usage Data: We collect anonymous, non-personally identifiable information, such as:
  • Device information (e.g., model, operating system)
  • Usage statistics (e.g., which features are used most frequently)
  • Crash reports via Firebase Crashlytics (only in the event of an error or crash)
• Cloud Vault Data: If you choose to use cloud storage (Google Drive, Dropbox), we access and store references to your files and folders within these services, but we never access or store the contents of the files themselves. Files remain fully under your control. When you choose to use a “Cloud Vault,” the app connects to your Google Drive or Dropbox account, where files are encrypted and stored securely. You can also choose to store data locally without using the cloud services.
• Derived Information: Derived information, such as usage patterns, preferences, and other metadata related to your interactions with the App, may be collected for the purpose of improving the App’s functionality and your user experience.

2. Purpose of Collection and Use

The data we collect is used for the following purposes:

• To Provide Functionality: To enable cloud storage features, such as syncing data to your Google Drive or Dropbox account, and to provide core features of the App, including photo/video/audio storage, private browser, and reminders.
• For Analytics: To help us understand how users interact with the App, improve functionality, and optimize the user experience. This includes collecting anonymous usage data for analytics via Firebase Analytics (and possibly Google Analytics GA4).
• For Crash Reporting: To gather crash and error data through Firebase Crashlytics to help improve the App’s performance.

3. Data Sharing and Disclosure

We share information with the following third-party services:

• Google Drive and Dropbox: Only the data necessary to facilitate cloud storage and sync features.
• Firebase: For crash reporting, analytics, and other app behavior tracking (via GA4). Firebase may collect anonymous data, but no personal information is shared.
• Other Third-Party SDKs: We may use third-party services such as AppsFlyer, Facebook, or Kochava for analytics, marketing, or advertising purposes. These services may collect anonymous, aggregate data related to your use of the App.
• Law Enforcement and Legal Compliance: We may disclose your data if required by law, to comply with legal obligations, or to protect our rights, the rights of others, or to prevent fraud or other illegal activities.

We never sell, rent, or lease your personal data to any third parties.

4. Data Security

We take data security seriously and employ industry-standard encryption measures, including AES-256 encryption for local storage and RNCryptor for encrypted data storage and transmission. While we make reasonable efforts to protect your information, we cannot guarantee 100% security. No method of transmission over the internet or electronic storage is fully secure, and you use the App at your own risk.

5. Data Retention and Deletion

You have full control over your data. You can delete your stored data at any time through the App. We will retain your data for as long as necessary to provide the services, unless you request deletion. If you stop using the App, we will retain certain anonymized usage data for analytics purposes, but no personally identifiable data will be retained without your consent.

If you wish to request the deletion of your data, please contact us at contact@infinityvaultz.com. We will process your request in accordance with applicable data protection laws.

6. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. For California residents, you may also have rights under the California Consumer Privacy Act (CCPA), and for European residents, you may have rights under the General Data Protection Regulation (GDPR).

• CCPA Rights: Under the CCPA, you have the right to request access to, deletion of, and information about your personal data. To exercise your rights, please contact us at contact@infinityvaultz.com.
• GDPR Rights: If you are a resident of the European Union, you have rights to access, rectification, deletion, and restriction of processing of your personal data. You may also object to processing or request portability of your data. Please contact us for further information on exercising your GDPR rights.

7. International Data Transfers

We may process, store, and transfer your information in countries outside of your own. We ensure that all data is protected in accordance with this Privacy Policy, regardless of where it is processed.

8. Cookies, Targeting, and Analytics

The App and our website may use cookies, web beacons, or other tracking technologies for the following purposes:

• Cookies: Cookies are small files stored on your device to enhance your experience. These may include functional cookies to remember your preferences and analytic cookies to track usage data for improving the App and website.
• Analytics and Targeting: We use services like Google Analytics and Firebase Analytics to track user behavior and improve the App. These services collect anonymous data, such as interactions with the app and website, to provide insights into user behavior.

You can control the use of cookies through your device’s settings. You may choose to disable cookies, but doing so may affect some features of the App or website.

9. Private Browser and History

The App includes a Private Browser that allows users to browse the web with restricted access to tracking technologies. Any cookies, history, or cache stored in the private browser tabs are isolated to each tab and can be cleared by the user at any time. The data is not shared with any third parties, and we do not retain any browsing history or cache beyond the session.

10. Privacy Choices

You have the ability to make privacy choices in the App, such as:

• Choosing to use cloud storage or local storage for your data.
• Controlling notifications, including local notifications for reminders (optional).
• Adjusting your preferences for data collection and analytics.

If you wish to update your preferences or exercise your privacy rights, please contact us at contact@infinityvaultz.com.

11. Marking Communications

We may send you notifications or other communications regarding the App, updates, and promotional materials. You can opt-out of receiving promotional communications by following the instructions in the communication or by contacting us directly.

12. Push and Local Notifications

If you use the optional Messages feature, the App receives push notifications through Apple’s notification service when an encrypted message arrives for you. These notifications contain only the text “New message” and routing data that identifies which encrypted record was created. They never contain message content, the sender, or the name of a conversation. Apple’s notification service sees only that a notification was delivered to your device.

We may send you local notifications to remind you about important events or updates, such as alarms for reminders. You can manage your preferences for receiving push and local notifications through your device settings or within the App.

13. Keychain Protection

The App uses the device’s Keychain to securely store and manage sensitive data, such as encryption keys and access credentials. This data is protected using user-specific methods such as a 4-digit PIN, 6-digit PIN, password, pattern lock, time-based one-time-password, biometric identification (Face ID/Touch ID), and/or geofence-based location checks. This ensures that only authorized users can access their data within the App.

14. Biometric Identification

If you choose to use biometric authentication (Face ID/Touch ID), this information is used solely for the purpose of securing access to the App. No biometric data is stored by the App, and it is never shared with third parties. The App simply relies on the device’s built-in biometric authentication system to facilitate access.

15. Location Services and Geofencing

The App may use location services for geofence-based protection, which can trigger security features based on your location. You will be asked for permission to access your device’s location information. Your location data is only used for this purpose and is never shared with third parties unless required by law or as described in this Privacy Policy.

16. Break-In Reports

The App includes an optional “Break-In Report” feature. If enabled, this feature will take a photo using your device’s camera, capture your location, and record the time of the event if a break-in is detected. This information is stored securely, and you can choose to disable this feature at any time through the app settings. This data is only collected and stored if the user explicitly opts in.

17. Keychain Recovery Email

You may optionally set a recovery email address for a Keychain. This address is stored locally on your device. If you request recovery from the lock screen, a recovery link is sent to that address through our email service; the address and message are used solely to deliver the recovery link and are never used for marketing or shared with third parties. Without a recovery email set, a Keychain cannot be recovered.

18. Trash Can and Data Deletion

The App includes a Trash Can feature where deleted items are temporarily stored. Items in the Trash Can will be automatically purged after a period of time set by the user in the App’s settings. Non-premium users cannot restore items from the Trash Can once they have been deleted.

Please note that deleted folders are not moved to the Trash Can and will be immediately and permanently deleted along with all of their contents. A pop-up notification will appear in the App before this action is performed to inform you of the irreversible nature of the deletion.

Once data is fully deleted, it cannot be restored by us. We encourage users to regularly back up their data to ensure they do not lose important files. Our company cannot access your data in any way to assist with data recovery once it has been permanently deleted from the App.

If you enable the optional Erase Data After Failed Attempts security feature, all App data on your device is permanently erased after the number of consecutive failed unlock attempts you select. This erasure occurs entirely on your device and is irreversible.

19. Backup and Data Restoration

We strongly recommend that you back up your data regularly. The app does not perform backups automatically and backup of the database and local storage must be handled manually by you via iTunes Backups or by using the various export features in the App. 3rd Party Cloud services may have backup solutions, but no support will be provided for these solutions. Once data has been deleted from the App or the Trash Can, it cannot be restored. Our company does not have access to your data in a way that would allow us to assist with recovery. Please ensure that you take appropriate precautions to back up your important files.

20. No Guarantee of 100% Security

While we make every effort to protect your data, including using AES-256 encryption and other security measures, we cannot guarantee that your data will be 100% secure. No method of electronic storage or transmission is fully secure, and you use the App at your own risk.

21. Impact of Premium Subscription on Data Access

If you stop paying for the premium subscription, you may lose access to certain premium features and functionalities within the App. These features may include enhanced storage, advanced encryption options, or additional cloud storage services. You will still retain access to your previously stored data, but some premium functionalities will be restricted unless you renew your subscription.

22. On-Device AI Assistant

The App includes an optional on-device AI assistant. AI models are downloaded from third-party model repositories (such as Hugging Face) and run entirely on your device. Your chats, prompts, generated images, and any AI “memories” or notes the assistant creates are processed and stored locally within your encrypted Vault and are not sent to us. Other on-device intelligence features are also processed entirely on your device. These include audio transcription, automatic photo tagging, duplicate photo analysis, and image upscaling.

Some optional AI tools, when you choose to enable and use them, send limited data off your device to perform their function: web search and URL fetching send your query or the requested address to a privacy-respecting search provider (DuckDuckGo), and the weather tool sends location information to a weather service. Tools that access your own data operate entirely on-device. These include searching your files and notes and creating notes and memories. You control which tools, if any, are enabled for each AI agent.

If you choose to connect a self-hosted model server (such as Ollama on your local network) or a cloud AI provider (such as Anthropic, OpenAI, or Google) using your own API key, the messages and attachments you send to that model are transmitted to that server or provider and are subject to its privacy policy. We never receive or store this data. Cloud providers are entirely optional and are clearly indicated in the App.

23. Private Messaging

The App includes an optional end-to-end encrypted messaging feature for communicating with other Infinity Vaults users. No account, phone number, or email address is required, and we operate no messaging server. This section explains exactly what data exists, where it is held, and who can see it.

Data on your device. When you first use Messages in a vault, the App generates a messaging identity for that vault, consisting of a pair of encryption keys and a pair of signing keys. These keys, the public keys of the people you connect with, the encryption key of each conversation, and every message you send or receive are stored only inside that vault’s encrypted database on your device. They are protected by your vault’s encryption and your lock screen, and they are never transmitted to us. Private keys never leave your device. A small table that maps mailbox identifiers to vaults is stored in the device Keychain so that the App can route incoming notifications.

Data on Apple’s servers. Messages are delivered through Apple’s iCloud (CloudKit) service using your own iCloud account, which must be signed in on the device. While a message is in transit, an encrypted copy is stored in the App’s iCloud database. That record contains the encrypted message, the random mailbox identifier it is addressed to, a timestamp, a size, and an expiry date. It does not contain readable content, any decryption key, your display name, your contact’s name, or any identifier of the recipient’s account. The record is deleted once the recipient’s device has collected it, or after 30 days if it is never collected. The connection handshake that links two users travels the same way. Apple attaches to each record an opaque identifier of the iCloud account that created it. As a result, Apple is able to see that your iCloud account wrote or collected encrypted records, at what times, and of what sizes. Apple cannot see the content of any message. Apple’s own privacy policy governs its handling of this metadata.

Data we can access. None of the content. We do not operate a server that handles messages, and we hold no keys. Our only server-side component is a scheduled job that deletes expired encrypted records from the iCloud database. It can see the timestamps and sizes of those records and nothing else. We cannot read, recover, or intercept your messages, and we cannot restore a conversation you have deleted.

Other users. No other user can decrypt your messages. The App’s iCloud database is shared by all users of the App, so a user who modifies their copy of the App could observe that encrypted records exist, their timestamps and sizes, and the account identifier Apple stamps on them. Mailbox identifiers are random and are not relied on as a security boundary.

Invitations. Connecting with another user requires an invitation, shared as a link or a QR code. The invitation contains your public keys, a one-time mailbox identifier, and the display name you chose. It contains nothing that can decrypt messages. Invitation links point to our website so that a person without the App can find it on the App Store, but the invitation data is placed in the fragment of the link, which web browsers do not send to any server, so our website does not receive it. Each invitation can be used once.

Display name and contacts. The display name you choose is shared only with the people you connect with and is not sent to us. Each messaging connection is attached to a contact card in the App’s Contacts section on your device. Removing a connection notifies the other person’s App, after which neither device can send to the other. Your conversation history remains on your device until you delete it.

Deletion. Deleting a conversation removes its messages from your device. If you started the conversation, your App also sends an encrypted notice so that the other participants’ devices remove it the next time they open. Messages that have already been delivered to another person’s device remain on that device under that person’s control, as with any messaging service.

Analytics. Our anonymous usage analytics may record that the Messages feature was opened or that a message was sent. They never include message content, recipients, or identifiers.

24. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be communicated via the App, and the “Effective Date” will be updated accordingly. Your continued use of the App after such changes constitutes your acceptance of the updated Privacy Policy.

25. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: