MaxVault Privacy Policy

Last updated: July 25, 2026

This Privacy Policy describes how Rambax, LLC (“Rambax,” “we,” “us,” or “our”) handles information when you use MaxVault, including versions previously known as Pocket Files (“MaxVault”).

1. Vault Content and Local Processing

MaxVault stores the photos, videos, documents, folders, browser downloads, saved signatures, break-in records, and other content you add to a vault on your device by default. Rambax does not receive or store that vault content merely because you import, view, organize, edit, or play it in MaxVault.

Content leaves your device only when a feature you choose requires it, such as exporting or sharing a file, using a third-party storage provider, opening an external website, transferring files over your local network, sending content to support, or using an operating-system backup or sync service. The destination’s terms and privacy practices govern its handling of the content.

2. App Permissions

Depending on the features you enable, MaxVault may request permission to:

• access your photo library to import or save photos and videos;
• use the camera and microphone to capture photos or videos;
• use Face ID or Touch ID to unlock the app;
• access location to attach location metadata to captured media or an optional break-in record; and
• access the local network to provide Wi-Fi file transfer.

These permissions can be changed in device settings. Restricting a permission may prevent the related feature from working. Biometric matching is performed by the device’s operating system; Rambax does not receive your face or fingerprint data.

3. Optional Break-In Reports

If you enable break-in reporting and grant camera permission, MaxVault may use the front-facing camera after an unsuccessful passcode attempt. If location access is available, it may also attach the most recent location. The resulting photo, date, and location record are stored in the app’s local break-in folder. Rambax does not receive this record unless you choose to export, share, back up, or otherwise transmit it.

4. Optional Account and Password Recovery

If you create or use MaxVault’s optional recovery account, Rambax’s account services process your email address, authentication credentials, customer identifier, account status, and security-related request information. Passwords used to authenticate to Rambax services are protected using security measures designed for credential storage and are not displayed to Rambax staff.

If you explicitly request recovery of an app or folder passcode, the passcode you chose is sent through Rambax’s messaging service to the recovery email address you selected. This means Rambax’s messaging infrastructure and email-delivery providers process that passcode for delivery, and it will exist in the recipient’s email account. Use a secure email account and do not reuse a sensitive password as a MaxVault passcode.

MaxVault may also process a legacy Pocket Files customer identifier, purchase record, or recovery account identifier when needed to migrate existing access to supported Rambax services.

5. Rambax Product Services

MaxVault uses Rambax-operated account, entitlement, purchase-management, in-app messaging, and product-analytics systems. These systems may process:

• a customer, installation, account, device, and session identifier;
• app version, device model, operating system, locale, time zone, and request IP address;
• App Store product, transaction, subscription, and entitlement information, but not your full payment-card number;
• an Apple Ads attribution token and campaign information, when available, to measure which Apple ad led to an App Store install;
• app launches, sessions, feature interactions, paywall or message impressions and actions, and review-prompt activity; and
• security, fraud-prevention, delivery, and service-error information.

We use this information to authenticate optional accounts, provide and restore purchased features, operate and secure the app, show relevant in-app information, measure reliability and feature use, prevent fraud, and improve MaxVault. We do not use it for third-party behavioral advertising.

6. Diagnostics

After a crash or serious app error, MaxVault may automatically send a limited diagnostic event to Rambax. It may include an excerpt of the technical crash report; app version and purchase status; device model, operating system, locale, and time zone; an app customer or device identifier; database size or item-count measurements; and error details. We use this information to diagnose crashes, database failures, compatibility problems, and reliability issues. Diagnostic reports are not intended to contain the contents of vault files, although technical records may reveal filenames, paths, or other metadata involved in an error.

7. Support Communications

If you contact support from MaxVault, your device’s email application prepares a message that you choose whether to send. It may include your own description, app and OS version, device model, Rambax customer identifier, database size, item or vault counts, and error information. You may edit the draft before sending it. Please do not include vault content, passcodes, account passwords, or other sensitive information unless it is necessary for support.

8. Wi-Fi Transfer, Private Browser, and External Services

Wi-Fi Transfer runs a local web service on your device so a computer or browser on the same network can access permitted files. Rambax does not route those file transfers through its servers. Other people on the same network may be able to reach the local service if they obtain the address and any access code, so use a trusted network and close the feature when finished.

MaxVault’s private browser is a web browser, not a VPN or anonymity service. Websites, Internet providers, search engines, content-delivery networks, and downloaded-content hosts may receive ordinary web-request information and may use cookies or other technologies under their own policies. MaxVault may retain local browser history, bookmarks, downloads, or website data according to your settings.

9. Purchases

Apple processes App Store payments and handles your payment credentials. Rambax receives transaction, product, subscription, and entitlement information needed to validate, restore, and support purchases. Apple’s privacy policy governs information Apple processes independently.

10. Disclosures and Service Providers

We disclose information only as reasonably necessary to operate MaxVault, including to cloud hosting, database, email-delivery, security, and technical service providers processing information on our behalf; Apple and operating-system providers; professional advisers; or a successor in a merger, financing, reorganization, or sale. We may also disclose information to comply with law, respond to valid legal process, investigate abuse, or protect rights and safety.

We require service providers that process personal information for us to protect it and use it only for the services they provide. We do not sell personal information or share it for cross-context behavioral advertising, and MaxVault does not use third-party advertising trackers.

Rambax does not collect information about your activities over time across unaffiliated apps or websites for targeted advertising. Because we do not engage in that tracking, browser Do Not Track and Global Privacy Control signals do not change Rambax’s processing. Websites you independently visit in MaxVault’s browser may collect activity under their own policies and control how they respond to privacy signals.

11. Retention and Deletion

Locally stored vault content remains on your device until you delete it, move it, erase the device, or remove it through a backup or storage provider. Uninstalling the app or losing the device may permanently remove local content, subject to any backup you control.

Rambax retains recovery-account, customer, entitlement, purchase, event, diagnostic, security, and support records only for as long as reasonably necessary to provide the app, restore purchases, troubleshoot problems, prevent fraud, maintain business records, and meet legal obligations. You can delete an optional recovery account using an available in-app control or request deletion by contacting us. Deleting a Rambax account does not itself erase files stored locally on your device, and Rambax may retain transaction, security, and legal records where permitted or required.

12. Legal Bases for Processing

Where European Economic Area, United Kingdom, or Swiss data-protection law applies, we process personal data as necessary to provide MaxVault and purchased or requested account features; for our legitimate interests in operating, securing, supporting, and improving the app; to comply with legal obligations; and, where required, with your consent. You may withdraw consent through app or device settings or by contacting us, without affecting processing already lawfully completed.

13. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, or a portable copy of personal information; restrict or object to certain processing; withdraw consent; or appeal a privacy-request decision. You may also complain to your local data-protection authority.

California residents may have rights to know, access, correct, or delete personal information and to receive information about its use and disclosure. Rambax will not discriminate against you for exercising an applicable privacy right. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not provide a sale or sharing opt-out. We may verify your identity and authority before completing a request.

14. International Processing and Security

Rambax is based in the United States. We and our service providers may process information in the United States and other countries, using legally recognized transfer safeguards where required. We use reasonable administrative, technical, and organizational measures designed to protect information, but no system can be guaranteed completely secure. MaxVault’s passcode and biometric features add app-level access controls; they are not a substitute for device security, encryption, secure backups, or physical control of your device.

15. Children’s Privacy

MaxVault is a general-audience utility and is not directed to children under 13. We do not knowingly collect personal information through Rambax services from a child under 13 without any consent required by law. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.

16. Changes to This Policy

We may update this policy to reflect changes to MaxVault, our practices, or applicable law. We will post the revised policy here and change the “Last updated” date. We will provide additional notice when required by law. The revised policy applies from the posted “Last updated” date unless a later date is stated.

CONTACT INFORMATION

Questions about this Privacy Policy should be sent to us at [email protected].