VaultWise Data and Security

Local-first architecture

Your records are stored in a database inside the app’s private storage area, which Android isolates from other apps. VaultWise has no user-account system and no backend server holding your data — there is no central database of VaultWise users that could be breached.

Device-level protection

The app’s private storage benefits from Android’s security model and, on devices with a screen lock, from Android’s file-based encryption. Use a strong screen lock and keep Android and VaultWise up to date.

App PIN

You can protect the app with a separate PIN. The PIN itself is never stored: VaultWise keeps only a verification value derived with PBKDF2 and a random salt, so the PIN cannot be read from the device or recovered by us. Because there is no recovery mechanism, keep your backups current in case you forget it.

Backup security

Google backups are stored in the private app-data area of your Google account — other apps cannot read them, and they are protected by your Google account’s security; we recommend enabling two-factor authentication. Exported .vwbak, CSV and PDF files are not encrypted; treat them like financial documents: store them in a secure location and take care when sharing.

Network security

All network requests use HTTPS. The only requests the app makes are live-price lookups (containing only public currency or instrument identifiers) and Google backup transfers (between your device and your own Google account). Your financial records are never sent to VaultWise or to price services.

What we cannot see

Because there is no VaultWise server and no account system, the developer has no access to your data, cannot reset your PIN, and cannot recover data you have deleted. This is a deliberate design choice.

Steps you can take

• Use a strong screen lock and keep your operating system up to date.
• Enable the app PIN.
• Back up regularly — ideally both a .vwbak file and a Google backup.
• Store exported files in a secure location.
• Be careful not to leave your financial data open on shared devices.

Reporting security issues

If you believe you have found a vulnerability in VaultWise, report it to support@unselstudio.app. Please include steps to reproduce it; we take reports seriously and respond as quickly as possible.