Privacy is not a
Feature. It's the Default .
We built Vaultr because we are tired of corporations scraping our saved screenshots, social posts, and private notes. Vaultr runs completely locally on your device's own hardware.
1. Local-First Default
The primary vault of all your collected media—including TikTok links, Instagram Reels, screenshots, PDFs, photos, and notes—lives exclusively on your physical mobile device.
We store your data locally using a high-performance SQLite database (fully optimized with FTS5 virtual search indexes). There is no remote dashboard or database holding your data. If you delete the app or lose your phone without a local backup, your vault is gone forever. We do not have your keys.
2. On-Device AI Inference
All intelligent features run directly on your smartphone's system-on-a-chip hardware (such as Apple's Neural Engine and CPU processors):
- Optical Character Recognition (OCR) runs local image processing (Apple Vision API) to index readable texts inside photos and screenshots.
- Voice Transcription for saved videos and screen recordings extracts keywords purely on-device.
- Vector Neural Net Indexing translates raw texts and visual descriptors into vector embeddings stored in a local vector database.
NO DEFERRAL: Unlike typical modern apps, we never upload your screenshots or texts to cloud servers for remote LLM summarization or processing.
3. Zero-Sync V1 Architecture
We do not run an application sync or hosting server. For both developer alpha test flights and public builds:
- There is no central web backend storing user data.
- No account logins or profile creations are required to utilize the app.
- No tracking pixels, third-party analytics dashboards, or data-broker aggregators are ever linked to your local ledger.
4. Honest Web Fetching
When you dump raw URLs into your vault, Vaultr must fetch metadata (such as titles, summaries, and cover icons) to present clean previews.
All preview metadata fetches happen directly from your device's browser client to the destination host (e.g., standard HTTP headers). We never route preview requests through a Vaultr server. While this means destination hosts can see your IP address (just like normal web browsing), it guarantees that we have absolutely no visibility into the web pages you collect.
5. Secure Encrypted Backups
To avoid database corruption or physical phone loss, we enable local backup generation:
- Backups are compiled into a custom client-side archive format: `.uavbackup`.
- Every backup is heavily encrypted using industry-standard AES-256-GCM symmetric-key encryption using a secret key you define.
- Backup files are stored locally on your device or can be manually exported. We do not integrate with or upload to any cloud storage providers (like Google Drive, iCloud, or Dropbox), ensuring your backup artifacts remain strictly under your physical control.
Have Questions?
If you have suggestions, questions, or would like to audit our local-first storage architecture, reach out directly to the founders.
Miguel Kalaw & EJ Gungon