Updated 16 October 2026 · Operator: Fidel Seehawer
The information in your vault
UnumVault stores your logins, passwords, previous passwords, notes, cards, identities, authenticator seeds, attachments, and retained import data in an encrypted local vault. Your devices decrypt vault content when you unlock it. UnumVault has no operator-run vault server or UnumVault account registration.
The app does not send your master passphrase, recovery key, or decrypted vault contents to us. We cannot reset your master passphrase, look up a password for you, or remotely recover your vault.
Optional iCloud sync
If you enable sync, the app sends an encrypted vault snapshot to your private CloudKit database using your Apple account. Apple operates this service and processes the cloud record, file size, revision and service metadata needed to store and synchronize it. The app encrypts vault content before upload; it does not upload your master passphrase or separately exported recovery key.
Sync is optional. Turning it off stops future app sync activity; it does not delete an existing cloud copy. Copies already stored in iCloud, local backups, or files you exported need to be managed separately. Apple’s services are subject to Apple’s privacy policy.
Touch ID and Face ID
Biometric unlock is optional and enabled separately on each device. The app uses Apple’s authentication services and stores a device-bound vault-unlock key in the system Keychain, protected by the device’s current biometric enrollment. That key is not synchronized by UnumVault. The app does not receive or store your fingerprint or facial template. You can disable biometric unlock in the app’s Settings; your master passphrase remains the fallback.
Biometric access is not a transferable recovery method. Apple describes how Face ID protects biometric information.
Apple AutoFill
The AutoFill extension can access the shared encrypted local vault and, when enabled, its device-bound biometric key. You unlock before a credential is provided to the requesting app or website through Apple’s AutoFill services.
Publishing AutoFill suggestions is a separate opt-in. It places website domains, usernames, item identifiers, and authenticator labels in Apple’s system credential-identity store, outside the encrypted vault, so the system can suggest matching items. Authenticator labels can contain the item title when there is no username. Passwords and authenticator seeds are not published in that suggestion index. Turning suggestions off asks the system to remove UnumVault’s published identities.
Purchases
Apple handles the one-time purchase, payment, and purchase restoration. UnumVault uses StoreKit to check verified transaction and entitlement information on the device. The app has no developer-operated purchase-verification server and does not receive your payment-card details. See Apple’s App Store privacy notice for Apple’s processing.
Imports, camera access, and clipboard
Imports are read locally from files you choose. Supported source data, including original provider data retained for preservation, is stored inside the encrypted destination vault. Source exports can contain readable secrets; UnumVault does not upload them to this website or delete your original export for you.
If you choose camera scanning on iPhone, the app requests camera permission to read an authenticator QR code. QR images you choose are decoded locally. The app does not send camera images or QR setup secrets to us.
Choosing Copy places the selected password, authenticator code, or recovery key on the system clipboard. The app attempts to clear its unchanged clipboard content after the configured timeout or when locking; other software and system clipboard behavior can affect copies after you make them.
Backups, recovery, and deletion
Backups and exports are written to locations you choose. Those locations may be managed by another file or cloud provider. A regular encrypted backup needs the master passphrase it was saved with. A recovery backup consists of an encrypted snapshot and a separate plaintext recovery-key file; anyone with both can unlock that snapshot. Keep them in separate private places.
A recovery snapshot contains only the data present when it was exported. Later additions and changes require a fresh backup. UnumVault does not retain a copy of the exported recovery key for you.
Deleting an item or a previous-password version is not a guarantee of erasure from every copy. Original imported data, historical records, encrypted local recovery copies, and older backups or exports can retain information. Uninstalling the app or disabling sync does not remove files you exported or every copy in iCloud. We cannot inspect or delete those copies remotely.
Settings, analytics, and diagnostics
The app stores preferences such as lock and clipboard timing, generator options, sync and suggestion choices, and unfinished setup progress locally. Generated password candidates and the recovery key are not saved as preferences.
The current app contains no advertising, tracking, or developer-operated analytics service and does not automatically send vault contents or app usage to us. Apple may separately process store, iCloud, system, and diagnostic information under your Apple settings and its policies.
Support and privacy requests
The app and website are operated by Fidel Seehawer. If you contact support@unumvault.app, the receiving email service processes your address and any information you choose to send so we can respond. Do not include real passwords, authenticator seeds, recovery keys, or vault exports.
Use the same address for questions about this policy or requests concerning information you have sent us. The app has no UnumVault account to close. Your local files, private iCloud storage, Apple purchase records, and device permissions are controlled through the app, your file providers, or Apple’s services as applicable.
Changes to this policy
We will update this page when the app’s data handling changes and revise the date above. Feature availability and remaining validation are described in the release status.
Website privacy · Security and recovery · Contact and release status