Pikeworks
Vault Vault
Privacy policy
Last updated 19 September 2026.
Vault Vault is made by me, Edward Morrison, trading as Pikeworks, a sole trader in Northern Ireland. This is what the app keeps, what leaves your phone, and why.
What stays on your phone
Vault Vault opens the other Vault apps and keeps no log of its own. It only stores its settings on your phone. To show which Vault apps you already have, it checks on the phone which of them are installed. That check isn't sent anywhere.
If your phone backs up its apps to your Google account or to iCloud, that backup can include these settings. Google or Apple keep it for you. It isn't sent to me.
Looking things up
Vault Vault doesn't look anything up. Tapping an app you don't have opens its page in the app store. It only uses the internet for Vault Social, if you turn it on.
Vault Social, if you turn it on
Vault Social is off until you turn it on in the app's Friends tab. It lets you add friends by their handle, an invite link or the code on their Friends tab. It doesn't ask for your name, email address or phone number. One account works in every Vault app you turn it on in.
Vault Vault doesn't post anything itself. With Vault Social on, it shows what your friends share from all the Vault apps in one feed, and you can react, comment and manage your friends from it. What each app shares is set out in that app's own policy, listed on the privacy page. The service, which I run on a server in the United Kingdom, holds:
- a handle, made up for you and changeable, and a display name if you add one;
- a sign-in key for each phone, stored only in a scrambled form that can't be turned back into the key, with which Vault app and which system it's on, the operating system version and the date it last signed in;
- a scrambled copy of your recovery phrase, if you make one;
- your friends, requests and blocks, and the reactions and comments you add;
- any report you make, and, if someone reports you, a copy of what was reported until it has been dealt with;
- if your account is linked to Apple (Sign in with Apple, offered on iPhone) or to Google (offered by Beer Vault on Android), the account number Apple or Google gives the service, never your email address, name or picture.
Only the friends you accept can see what you share, and each Vault app can be made private on its own. There's no public profile, no directory and no search for strangers. Connections to the service go through Cloudflare, which protects it from attacks. If you sign in with Apple, Apple handles that step and isn't told anything about what you log. Your IP address is used to stop abuse such as mass sign-ups, and is kept for no more than two days. There are no adverts and no analytics.
The service is only used to run Vault Social. Nothing in it is sold or shared with anyone for any other reason. Other people only see what's listed above, and only if you're friends. The community rules cover what you post and comment.
Purchases
Vault Vault sells nothing and has no purchases.
Permissions
The only use of the camera is scanning a friend's code on the Friends tab, when you tap to do that. Vault Vault doesn't show notifications, and it doesn't ask for your location, contacts or photos.
On Android, scanning uses Google's ML Kit, which reads the code on the phone and doesn't send what you scan. When the scanner is used, ML Kit sends Google some technical details: the phone's model and Android version, the app's name and version, a random number for this installation, and how well the scanner worked. Google uses them to keep ML Kit working and to measure how it's used. On iPhone, the phone's own scanner is used.
Age
Vault Vault is for anyone aged 13 and over. It isn't aimed at children, and Vault Social isn't for anyone under 13.
Deleting your information
Uninstalling Vault Vault deletes its settings from your phone. To delete your Vault Social account, open Settings, then Friends, then Delete the account. That deletes the account and everything it held straight away, in every Vault app, including your posts, comments, friends and the reports you made. Nightly backups of the service are kept for 14 days, so a deleted account is gone from those within 14 days. If you can't open the app any more, see deleting a Vault Social account.
Your rights
You can ask for a copy of what Vault Social holds about you, ask for it to be corrected or deleted, and complain to the Information Commissioner's Office at ico.org.uk. Vault Social relies on your choice to turn it on, and on my legitimate interest in keeping the service safe.
Changes
If this policy changes, the date at the top changes and the new version replaces this one.
Contact
Email me at hello@pikeworks.co.uk.