Resolve Vault

Privacy Policy

Effective date: 2026-02-21 · Last updated: 2026-02-21

This Privacy Policy explains how Hugo Miguel Carvalho Soares (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use Resolve Vault (the “App”).

1. Data Controller

2. Data We Process

We split this into two parts, because it matters: what actually reaches our server, and what stays only on your own device.

Data that reaches our server (api.resolvevault.app)

  • Your email address, associated with your license.
  • License status data: license key, expiry date, enabled features.
  • A one-way hashed device identifier (SHA-256), used only to enforce license seat limits. We receive only this hash — never your raw hardware ID, MAC address, or hostname.

That's it. We do not receive your files, your backup names, your Google Drive/Dropbox account details, your app settings, or any usage/analytics data.

Data that stays only on your device

The following is stored locally by the App and is never transmitted to us:

  • App configuration: backup paths, schedule preferences, which cloud providers you've connected.
  • Cloud integration credentials: your Google/Dropbox account email and OAuth tokens, stored locally so the App can talk directly to Google/Dropbox on your behalf. We never see or receive these tokens.
  • Backup metadata: local file names, local file paths, timestamps, sizes, and which cloud provider each backup was uploaded to.
  • Diagnostic logs: technical logs written to your device for troubleshooting, automatically capped and rotated (older entries are overwritten, never kept indefinitely).

We have no automated way to access any of this. The only way we ever see log data is if you choose to send it to us yourself for support.

We do not use analytics, telemetry, or usage tracking of any kind. We do not collect or have access to your backup content (your .drp project files) — cloud sync happens directly between your device and Google Drive/Dropbox, never through our servers.

3. Why We Process Data (Purposes)

  • Provide licensing and anti-fraud controls.
  • Enable backup automation and cloud backup workflows.
  • Provide support, diagnostics, and service reliability.
  • Meet legal obligations.

4. Legal Bases (GDPR/UK GDPR)

Where applicable, we process data under one or more of:

  • Contract performance (Art. 6(1)(b)).
  • Legitimate interests (Art. 6(1)(f)) for fraud prevention, security, and reliability.
  • Legal obligation (Art. 6(1)(c)).
  • Consent (Art. 6(1)(a)) for optional integrations where required.

5. Data Retention

  • License/account records on our server (email, license status, hashed device ID): kept up to 7 years for tax/accounting and legal obligations.
  • Diagnostic logs on your device: capped automatically (current log plus a few rotated backups, a few MB total) — older entries are overwritten, not kept indefinitely. If you send us a log file for support, we keep that copy only as long as needed to resolve your issue.
  • App settings and cloud credentials on your device: retained until you disconnect the integration or uninstall the App.

6. Sharing and Processors

We may share data with:

  • Licensing/hosting providers.
  • Payment/checkout providers used to fulfil your purchase (Lemon Squeezy, acting as merchant of record).
  • Cloud providers used by your chosen integrations (for example Google APIs).
  • Legal/regulatory authorities when required by law.

We do not sell personal data.

7. International Transfers

If data is transferred internationally, we use lawful safeguards (for example SCCs) where required.

8. Security Measures

We use technical and organizational measures including:

  • Signature verification for licenses.
  • Access controls on backend services.
  • Transport security (HTTPS/TLS) in production.
  • Runtime storage separation and limited credential exposure.

No system is perfectly secure; users should also secure endpoints and backups.

9. Your Rights

Where applicable, you may have rights to access, correct, erase, restrict, object, and data portability.

Contact: hugosoarescolorist@gmail.com

If unresolved, you may lodge a complaint with your local data protection authority.

10. Children

The App is not directed to children under 16.

11. Changes to This Policy

We may update this Policy. Material changes will be communicated through in-app notice and website/legal page updates.

12. Contact

For privacy requests or questions: