Privacy

Privacy Policy

Last updated: October 28, 2026

DiscVault is local-first. Your collection — titles, editions, copies, notes, photos, watch history and stats — is stored on your own device. There is no DiscVault account, and we do not upload your collection to our servers, RevenueCat or Google advertising services. If you choose to export or share a backup, you control where that copy goes. Purchase records and advertising are handled separately, as explained below. This policy covers the DiscVault app and the discvault.us website.

What leaves your device

The app makes network requests for the following purposes, including automatic purchase-status checks where purchases are configured:

• Movie metadata (TMDB). When you scan or search for a film, DiscVault asks The Movie Database for the cover, cast, runtime and synopsis, using a free API key that you provide. Your request goes directly from your device to TMDB.
• Barcode lookup (UPCItemDB). When you scan a barcode, the number is sent to UPCItemDB to resolve the product title. Scanned barcodes are cached on your device so each is only ever looked up once.
• Beta unlock (optional). If you redeem a beta Pro code, the app sends that code and a randomly generated install identifier to our license server to validate the code. We do not ask for your name or email to redeem a beta code.
• Pro access (RevenueCat). In native app builds where purchases are configured, RevenueCat starts automatically and may contact its service when the app starts or returns to the foreground to refresh Pro access, even if you do not open the purchase screen or buy anything.
• Advertising (Google AdMob). In Android builds with advertising enabled, free users may see banners in Library and Discover. The app contacts Google for advertising and to manage advertising consent. DiscVault does not send your collection contents with these requests. Test builds may use Google test ads, which do not generate revenue but still make network requests.

Purchases and RevenueCat

We use RevenueCat to validate purchases, track subscription status, restore eligible Pro access, display purchase and management screens, and understand purchase and paywall performance.

RevenueCat uses a randomly generated anonymous App User ID. It processes purchase and subscription history, product and transaction identifiers, store receipts or purchase tokens, and purchase, renewal and expiration dates. It also receives technical information such as device type, operating system, app version, locale and last app activity time, and records interactions with its paywalls, such as views and dismissals. An anonymous ID identifies an app installation without requiring a DiscVault login; it does not mean no data is collected.

DiscVault does not send your collection, photos, watch history, name or email to RevenueCat. Store purchases are billed by the store you use, such as Google Play or the Apple App Store where supported. DiscVault does not receive your full payment card details.

RevenueCat processes this information on our behalf, and we can view purchase and subscription information through its dashboard. RevenueCat stores customer data in the United States and encrypts it in transit. More information about its handling of data is available at https://www.revenuecat.com/privacy-policy. The purchasing store also handles transaction data under its own privacy policy.

Advertising and privacy choices

DiscVault uses Google AdMob to show banners to free users in Android builds where advertising is enabled. Google Mobile Ads may collect and share your IP address (which can indicate a general location), device or advertising identifiers, app and device technical details, diagnostics and ad interactions for advertising, analytics and fraud prevention. Google's privacy policy is available at https://policies.google.com/privacy.

DiscVault requests non-personalized ads. This does not mean that advertising services collect no data or that consent is never required. DiscVault does not send saved titles, collection contents, photos, notes, watch history, scanned barcodes or your API keys as custom advertising data.

For live advertising, DiscVault uses Google's consent service to check whether ads may be requested and to present consent messages when required. Where available, use Privacy choices in Settings to review or change your advertising choices. Available choices depend on your region and Google's consent requirements. If the consent service does not permit ad requests, DiscVault does not request ads.

Ads are withheld while Pro access is being checked. Once Pro is active, DiscVault removes the banners and stops making new ad requests. Upgrading does not erase advertising data already processed by Google; required privacy choices remain available in Settings.

What we collect

DiscVault does not send the contents of your collection for usage analytics. RevenueCat processes the purchase, technical and paywall information described above for Pro access and purchase analytics. Google processes advertising information as described above in builds where advertising is enabled. Our website uses Google Analytics, as described below. We do not operate a server that stores your collection. If you contact support, we receive the information you choose to send so we can respond.

Website analytics

The DiscVault app does not use Google Analytics. Our website, discvault.us, uses Google Analytics to count visits and downloads and to understand how visitors find DiscVault, including whether a visit came from one of our promotions.

On pages that use it, Google Analytics sets cookies in your browser, and Google receives your IP address, which it uses to estimate your general location, along with the page address, the referring page, browser and device details, and the time of your visit. We use this information in aggregate reports. We do not send your name, email address or collection to Google Analytics. Google's use of this information is described at https://policies.google.com/technologies/partner-sites.

Google Analytics keeps event-level data for no longer than 14 months; aggregated reports may be kept longer. You can block or delete cookies in your browser settings, or install Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout. Blocking analytics does not stop the download. For questions about website analytics data, contact tex@discvault.us.

Permissions

• Camera — used to scan barcodes and, if you choose, photograph your cover, spine or back cover. Images from barcode scanning are not stored or transmitted; photos you choose to save stay on your device unless you export or share them.
• Photos — accessed only if you choose to attach your own photos. Saved photos stay on your device unless you export or share them.

Your data, your control

You can export your collection to CSV or a JSON backup from Settings. Clearing the app's data or uninstalling removes the collection stored by the app on that device; keep a backup if you want to restore it. Copies you exported or shared must be deleted separately.

Uninstalling or clearing local data does not delete purchase records held by RevenueCat or the store, and does not cancel a subscription. Use Manage purchases in Settings or the purchasing store to manage or cancel subscriptions.

For questions or requests to access, correct or delete purchase-related data we handle through RevenueCat, contact tex@discvault.us. We may need a purchase reference or other information to locate the anonymous customer record and verify your request; do not send payment card details. Purchase records may need to be retained to provide access, meet legal obligations or resolve disputes. The store handles requests for its own records separately. Deleting purchase data is not a cancellation or refund request.

Children

DiscVault is not directed at children under 13.

Changes

If this policy changes, the updated version will be posted on this page.

Contact

Questions? Reach out at tex@discvault.us.