Privacy Policy — Vaultside
Last updated: [DATE TO BE COMPLETED]
This policy explains what personal data the Vaultside application ("the App", "we") collects, how it is used, and what rights you have over it.
1. Who we are
Vaultside is a self-hosted social network application, operated by Mechanist Vault Inc. For any question about this policy or your data, contact us at: info@mechanistvault.com.
2. Data we collect
2.1 Account data
- Username, email address, password (stored encrypted, never in plain text)
- Display name, bio, profile picture (optional)
- Privacy preferences (private/public account, who can comment/message you, etc.)
2.2 Content you post
- Posts, reels, comments, stories, and their associated media (photos/videos)
- Captions and comments may mention other users
2.3 Private messages
Private messages sent in the App are end-to-end encrypted: they are encrypted directly on your device before sending, and only you and your recipient can read them. We technically have no ability to read the content of your private messages — our servers only store encrypted data.
Technical limitation to note: if you lose your device or reinstall the App without a backup, your message history may become unreadable, including to you.
2.4 Interaction data
- Likes, views, shares, follows/followers, reports you submit
- Activity history (time spent in the App, if you enable this feature)
2.5 Technical data
- IP address and session information, for security purposes (e.g. detecting suspicious logins)
- Login tokens (active sessions, viewable and revocable from the App's settings)
2.6 Data you import yourself
If you choose to import a personal data export from another service (e.g. Meta, Instagram) via the "Recovery" feature, that file is stored securely on our servers, accessible only by you, and can be deleted at any time from the App.
3. How we use this data
- To operate the App: display your feed, conversations, and profile
- To rank content in the "For You" and "Discover" feeds based on an engagement score (likes, comments, shares, views, weighted by recency) — an automated calculation, with no artificial intelligence or advertising profiling
- To automatically moderate posted images and videos to detect inappropriate content (nudity, violence) before publication (see section 4)
- To respond to content reports made by you or other users
- To secure your account (active sessions, password changes)
- To let you export a copy of your own data at any time
We do not sell your personal data to third parties, and we do not use it for advertising purposes.
4. Sharing with third parties
- Google Cloud Vision (Google LLC): every image and video posted is sent to this service for automated content-safety analysis (nudity/violence detection), before being published.
- Resend: used to send notification emails to our moderation team when a post is reported.
5. Data security
- Passwords stored in hashed form
- Private messages end-to-end encrypted
- Parental mode PIN code stored in hashed form
6. Parental mode and minor users
[TO BE COMPLETED: minimum required age, and policy toward users under 13]
7. Your rights
- Access/export: Settings → Recovery → "Download my data"
- Deletion: upon request at info@mechanistvault.com
- Correction: editable directly in the app
8. Data retention
[TO BE COMPLETED: how long data is retained after account deletion]
9. Cookies and similar technologies
[TO BE COMPLETED: whether the website or App use cookies/trackers]
10. Changes to this policy
[TO BE COMPLETED: how users will be informed of future changes]
11. Contact us
For any question regarding this privacy policy: info@mechanistvault.com