Zero-Knowledge Local Encrypted Vault

Military-Grade Privacy.
Zero Cloud Footprint.

SecureVault locks your sensitive photos, videos, and private records directly on your Android device using Google Tink AES-256-GCM and Argon2id. Create multiple isolated vaults with different keys for plausible deniability, direct encrypted camera capture, and an undercover CalculatorX stealth mode.

AES-256-GCM (Chunked AEAD)
Argon2id (Memory-Hard KDF)
KeyStore (Hardware Pepper)
MULTI-VAULT (Separate Keys)
FLAG_SECURE (Anti-Snoop)
100% OFFLINE (No INTERNET)

Built with Cryptographic Integrity

Engineered from the ground up to prevent data leaks, forensic recovery, and unauthorized surveillance.

Google Tink StreamingAead

Files are chunk-encrypted in 4KB blocks with AES-256-GCM. Decryption happens on the fly without leaving plaintext copies in system caches or storage buffers.

Direct-to-Disk Encrypted Camera

CameraX preview, photo capture, and audio/video recordings pipe directly into the AES-256-GCM cipher stream with optional automatic GPS EXIF stripping.

CalculatorX Stealth Disguise

Transform the home screen icon and application name dynamically into a fully functional scientific calculator. Only entering your master PIN unlocks the vault.

RAM-Only Video Streaming

Custom ExoPlayer Media3 DataSource decrypts video and audio feeds purely in volatile memory. No temporary files or caches ever touch the flash disk.

Screen & Recents Blocker

Hardware-enforced FLAG_SECURE blocks screenshots, screen mirroring, and system app-switcher thumbnails against malicious snooping.

Anti-Forensic Chaff & Shred

Features fixed-slot chaff databases to prevent metadata size analysis, plus a cryptographic instant wipe that overwrites raw ciphertext blocks with random noise.

Multiple Vaults (Unique Keys)

Create multiple independent vaults on one phone, each unlocked by an entirely distinct master PIN or pattern. Entering Key A unlocks Vault A; entering Key B unlocks Vault B with zero crossover.

Plausible Deniability Architecture

Different Keys.
Completely Different Vaults.

Under physical coercion, surveillance, or inspection, single-vault apps force you to surrender all your data. SecureVault introduces true Multi-Vault Isolation: create multiple independent vaults on the exact same phone, each bound to a unique master PIN or gesture pattern.

  • ✓ Cryptographic Zero-Knowledge: Each vault derives an independent 256-bit root key via Argon2id. One key cannot decrypt or even detect another vault's database.
  • ✓ Fixed-Slot Chaff Storage: The filesystem maintains fixed chaff slots so an adversary examining file sizes or slot counts cannot deduce how many real vaults exist.
  • ✓ Decoy Duress Defense: Hand over a secondary decoy PIN under pressure. The app opens your clean decoy vault with zero suspicion.
Real-World Duress & Privacy Flow
PIN: 1 2 3 4
→
Personal Vault #A73F Private photos, financial notes, biometric scans
PIN: 9 8 7 6
→
Work / Business Vault #E4B2 Client contracts, corporate credentials, SAF exports
PIN: 0 0 0 0
→
Decoy Coercion Vault #C199 Harmless vacation pictures, ordinary notes (Zero suspicion)
Unified Lock Screen • No vault selection menu • Key determines destination

Application Screenshots

Explore the native, high-contrast dark interface built with Jetpack Compose.

Transparent, Fair Pricing

Experience full, unrestricted access with our risk-free 7-day trial.

7 Days Free Trial

SecureVault Pro

₹100 / month
₹0 charged today during your 7-day trial
  • Multiple Independent Vaults with Separate Master Keys
  • Unlimited Encrypted Photos, Videos & Documents
  • Direct In-Vault Encrypted Camera Capture
  • RAM-Only ExoPlayer Decrypted Media Streaming
  • CalculatorX Stealth Launcher Disguise
  • Hardware KeyStore + SQLCipher Multi-Layer Protection
  • 100% Offline with Zero Ads & Zero Analytics
Start 7-Day Free Trial
Subscriptions automatically renew at ₹100/month after the 7-day trial ends unless canceled at least 24 hours prior to the end of the trial period. Manage or cancel anytime via Google Play Store (Profile → Payments & Subscriptions).

Privacy Policy

Our commitment to zero-knowledge cryptography and total user privacy.

Application: SecureVault (in.svati.securevault)
Effective Date: November 2026

This Privacy Policy governs your use of SecureVault ("the App"), developed by Svati IT Solutions. We have designed SecureVault under a strict Zero-Knowledge & Offline-First philosophy. Your privacy is paramount: we do not collect, transmit, store, or sell any of your personal data or encrypted files.

1. Strictly Offline Architecture

SecureVault operates 100% locally on your Android device. The application does not declare the android.permission.INTERNET permission. It possesses no networking code, has no external remote servers, and uses no third-party telemetry, crash reporting, or behavioral tracking SDKs.

2. Runtime Hardware Permissions & Usage

To deliver its core privacy capabilities, the App requests explicit user consent for the following device permissions:

  • Camera (android.permission.CAMERA): Required solely when you activate the direct encrypted camera inside the App. Video and photo frames from the camera are encrypted directly in volatile memory into the Tink AES-256-GCM cipher stream. No raw, unencrypted images or temporary files are ever stored on disk or transmitted.
  • Microphone (android.permission.RECORD_AUDIO): Required solely when recording video with audio in the direct encrypted camera. Audio streams are encrypted on-the-fly and never leave the encrypted vault.
  • Vibration (android.permission.VIBRATE): Provides tactile haptic feedback during numeric keypad and pattern grid interactions.

3. Storage & Scoped Access

SecureVault respects Android's latest Scoped Storage policies and does not request broad access to your device storage (such as MANAGE_EXTERNAL_STORAGE or READ_EXTERNAL_STORAGE). When you choose to import or export files, the App strictly uses Android's official Storage Access Framework (SAF) via system document pickers.

4. Cryptography, Key Protection & Multi-Vault Isolation

All files, folder metadata, and thumbnails are encrypted using industry-standard primitives:

  • Key Derivation: Derived using Argon2id with memory-hard parameters, combined with a hardware-backed salt/pepper stored securely in the Android KeyStore.
  • Multi-Vault Isolation: You can create multiple independent vaults on the same device with distinct master PINs or pattern gestures. Each vault derives a separate cryptographic key and manages an isolated SQLCipher database. Decrypting one vault gives zero mathematical or logical access to any other vault.
  • File Encryption: Google Tink StreamingAead AES-256-GCM chunked in 4KB segments.
  • Metadata Database: Fully encrypted SQLite database powered by SQLCipher 4.6+.

5. Data Retention & Deletion

Because all data is stored exclusively on your device, you retain total ownership and control:

  • You can shred individual items or virtual folders at any time.
  • Executing "Permanently Shred & Wipe This Vault" instantly overwrites the encrypted blobs and database slots with random noise.
  • Uninstalling the App or clearing app data through Android System Settings permanently destroys all ciphertext and hardware-backed keys.

6. Subscriptions & Billing

Monetization is processed exclusively through Google Play Billing (Google Play In-App Purchases). Payment details, credit cards, UPI mandates, and subscription renewals are handled directly by Google Play. SecureVault never has access to your payment credentials or financial information.

7. Children's Privacy

The App does not collect any personal information from any user, including children under the age of 13.

8. Contact Us

If you have any questions or feedback regarding this Privacy Policy or SecureVault's security practices, please contact us at:

Svati IT Solutions
Email: support@svati.in
Website: https://svati.in