MaxVault Privacy Policy

This Privacy Policy describes how Rambax, LLC (“Rambax,” “we,” “us,” or “our”) handles information when you use MaxVault, including versions previously known as Pocket Files (“MaxVault”).

1. Vault Content and Local Processing

MaxVault stores the photos, videos, documents, folders, browser downloads, saved signatures, break-in records, and other content you add to a vault on your device by default. Rambax does not receive or store that vault content merely because you import, view, organize, edit, or play it in MaxVault.

Content leaves your device only when a feature you choose requires it, such as exporting or sharing a file, using a third-party storage provider, opening an external website, transferring files over your local network, or using an operating-system backup or sync service. The destination’s terms and privacy practices govern its handling of the content.

2. App Permissions

Depending on the features you enable, MaxVault may request permission to:

• access your photo library to import or save photos and videos;
• use the camera and microphone to capture photos or videos;
• use Face ID or Touch ID to unlock the app;
• access location to attach location metadata to captured media or an optional break-in record; and
• access the local network to provide Wi-Fi file transfer.

These permissions can be changed in device settings. Restricting a permission may prevent the related feature from working. Biometric matching is performed by the device’s operating system; Rambax does not receive your face or fingerprint data.

3. Optional Break-In Reports

If you enable break-in reporting and grant camera permission, MaxVault may use the front-facing camera after an unsuccessful passcode attempt. If location access is available, it may also attach the most recent location. The resulting photo, date, and location record are stored in the app’s local break-in folder. Rambax does not receive this record unless you choose to export, share, back up, or otherwise transmit it.

4. Optional Account and Password Recovery

If you create or use MaxVault’s optional recovery account, Rambax’s account services process your email address, authentication credentials, customer identifier, account status, and security-related request information. Passwords used to authenticate to Rambax services are protected using security measures designed for credential storage and are not displayed to Rambax staff.

If you explicitly request recovery of an app or folder passcode, the passcode you chose is sent through Rambax’s messaging service to the recovery email address you selected. This means Rambax’s messaging infrastructure and email-delivery providers process that passcode for delivery, and it will exist in the recipient’s email account. Use a secure email account and do not reuse a sensitive password as a MaxVault passcode.

MaxVault may also process a legacy Pocket Files customer identifier, purchase record, or recovery account identifier when needed to migrate existing access to supported Rambax services.

5. Rambax Product Services

MaxVault uses Rambax-operated account, entitlement, purchase-management, in-app messaging, and product-analytics systems. These systems may process:

• a customer, installation, account, device, and session identifier;
• app version, device model, operating system, locale, time zone, and technical request information such as an IP address;
• App Store product, transaction, subscription, and entitlement information, but not your full payment-card number;
• an Apple Ads attribution token and campaign information, when available, to measure which Apple ad led to an App Store install;
• app launches, sessions, feature interactions, and paywall or message impressions and actions; and
• security, fraud-prevention, delivery, and service-error information.

We use this information to authenticate optional accounts, provide and restore purchased features, operate and secure the app, show relevant in-app information, measure reliability and feature use, prevent fraud, and improve MaxVault. We do not use it for third-party behavioral advertising.

These service records are linked to a customer, installation, or device identifier, including when you use the app without creating an account. Usage measurements include counts of actions such as importing and opening files; those counts do not include the contents of the files.

6. Diagnostics

After a crash, MaxVault automatically sends a technical crash report to Rambax, usually on the next launch. This includes the raw and formatted crash report, stack traces, loaded software images, crash time, app and operating-system versions, device model, and a customer or device identifier. Caught app errors may also send a diagnostic event with the error, the operation that failed, and the startup or runtime phase.

We use these reports to diagnose crashes, database failures, compatibility problems, and reliability issues. They are not intended to contain vault file contents, but technical crash and error records can reveal filenames, paths, exception text, or other metadata involved in a failure. User-submitted support reports are separate and may include additional information described below.

7. Support Communications

MaxVault offers in-app support conversations through Rambax services. When you choose to send a request or reply, we receive your message, any email address you provide, your customer identifier, and app and device context. An account is not required to contact support. If you enable email or push replies, we also process the address or device notification token and delivery preferences needed to notify you.

We use support communications to investigate and respond to your request. Avoid including account passwords or unnecessary sensitive information in your message.

Technical context included with a support report may contain the app and operating-system versions, device model, customer identifier, purchase-access status, database size, file or vault counts, and startup or error details. These are measurements and technical records, not a copy of the database or vault files.

Some support and recovery screens instead prepare an email or open the system share sheet. You choose whether and where to send the message, and you may edit an email draft before sending it. Optional bug or crash email drafts may also display available device storage in the message before you send it.

8. Wi-Fi Transfer, Private Browser, and External Services

Wi-Fi Transfer runs a local web service on your device so a computer or browser on the same network can access permitted files. Rambax does not route those file transfers through its servers. Other people on the same network may be able to reach the local service if they obtain the address and any access code, so use a trusted network and close the feature when finished.

MaxVault’s private browser is a web browser, not a VPN or anonymity service. Websites, Internet providers, search engines, content-delivery networks, and downloaded-content hosts may receive ordinary web-request information and may use cookies or other technologies under their own policies. MaxVault may retain local browser history, bookmarks, downloads, or website data according to your settings.

9. Purchases

Apple processes App Store payments and handles your payment credentials. Rambax receives transaction, product, subscription, entitlement, and App Store country or region information to validate and restore purchases, provide support, maintain billing records, and analyze purchases and subscriptions. These records are associated with your customer or installation identifier.

The App Store country or region is billing information supplied with the purchase; it is not your device’s GPS location. Rambax does not receive your full payment-card number. Apple’s privacy policy governs information Apple processes independently.

10. Disclosures and Service Providers

We disclose information only as reasonably necessary to operate MaxVault, including to cloud hosting, database, email-delivery, security, and technical service providers processing information on our behalf; Apple and operating-system providers; professional advisers; or a successor in a merger, financing, reorganization, or sale. We may also disclose information to comply with law, respond to valid legal process, investigate abuse, or protect rights and safety.

We require service providers that process personal information for us to protect it and use it only for the services they provide. We do not sell personal information or share it for cross-context behavioral advertising, and MaxVault does not use third-party advertising trackers.

Rambax does not collect information about your activities over time across unaffiliated apps or websites for targeted advertising. Because we do not engage in that tracking, browser Do Not Track and Global Privacy Control signals do not change Rambax’s processing. Websites you independently visit in MaxVault’s browser may collect activity under their own policies and control how they respond to privacy signals.

11. Retention and Deletion

Locally stored vault content remains on your device until you delete it, move it, erase the device, or remove it through a backup or storage provider. Uninstalling the app or losing the device may permanently remove local content, subject to any backup you control.

Rambax retains recovery-account, customer, entitlement, purchase, event, diagnostic, security, and support records only for as long as reasonably necessary to provide the app, restore purchases, troubleshoot problems, prevent fraud, maintain business records, and meet legal obligations. You can delete an optional recovery account using an available in-app control or request deletion by contacting us. Deleting a Rambax account does not itself erase files stored locally on your device, and Rambax may retain transaction, security, and legal records where permitted or required.

12. Legal Bases for Processing

Where European Economic Area, United Kingdom, or Swiss data-protection law applies, we process personal data as necessary to provide MaxVault and purchased or requested account features; for our legitimate interests in operating, securing, supporting, and improving the app; to comply with legal obligations; and, where required, with your consent. You may withdraw consent through app or device settings or by contacting us, without affecting processing already lawfully completed.

13. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, or a portable copy of personal information; restrict or object to certain processing; withdraw consent; or appeal a privacy-request decision. You may also complain to your local data-protection authority.

California residents may have rights to know, access, correct, or delete personal information and to receive information about its use and disclosure. Rambax will not discriminate against you for exercising an applicable privacy right. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not provide a sale or sharing opt-out. We may verify your identity and authority before completing a request.

14. International Processing and Security

Rambax is based in the United States. We and our service providers may process information in the United States and other countries, using legally recognized transfer safeguards where required. We use reasonable administrative, technical, and organizational measures designed to protect information, but no system can be guaranteed completely secure. MaxVault’s passcode and biometric features add app-level access controls; they are not a substitute for device security, encryption, secure backups, or physical control of your device.

15. Children’s Privacy

MaxVault is a general-audience utility and is not directed to children under 13. We do not knowingly collect personal information through Rambax services from a child under 13 without any consent required by law. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.

16. Changes to This Policy

We may update this policy to reflect changes to MaxVault, our practices, or applicable law. We will post the revised policy here and change the “Last updated” date. We will provide additional notice when required by law. The revised policy applies from the posted “Last updated” date unless a later date is stated.

CONTACT INFORMATION

Questions about this Privacy Policy should be sent to us at support@rambax.com.

Rambax, LLC
440 N Barranca Ave #2838
Covina, CA 91723
United States