Privacy Policy

PromptVault ("we," "us," or "our") operates the PromptVault mobile application and the website at promptvault.online (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Information You Provide

• Account data: When you sign up via Google Sign-In, Apple Sign-In, or email/password, we receive your name, email address, and profile photo (if available).
• User-generated content: Prompts you submit to the community, collections you create, and preferences you set (interests, saved prompts).

Information Collected Automatically

• Usage data: Screen views, feature interactions, and search queries via Firebase Analytics.
• Device information: Device model, OS version, app version, and unique device identifiers for crash reporting (Firebase Crashlytics).
• Ad identifiers: Advertising IDs used by AdMob and AppLovin MAX to serve relevant ads. You can reset or opt out of personalized ads in your device settings.

Cookies and Tracking Technologies

Our website (promptvault.online) uses cookies and similar tracking technologies to:

• Essential cookies: Maintain your session and remember your preferences (e.g., theme choice, cookie consent status).
• Analytics cookies: Understand how visitors use our site, which pages are visited most, and where traffic comes from (via Google Analytics).
• Advertising cookies: Google AdSense and its partners use cookies to serve ads based on your prior visits to our website and other sites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

You can opt out of personalized advertising by visiting Google Ads Settings. You may also opt out of third-party vendor cookies by visiting www.aboutads.info/choices.

Most web browsers allow you to control cookies through their settings. Note that disabling cookies may affect the functionality of certain features on our site.

2. How We Use Your Information

• Provide, maintain, and improve the Service.
• Personalize your experience (e.g., recommended prompts based on selected interests).
• Process credits earned through rewarded ads and manage your account balance.
• Send push notifications (you can opt out at any time in device settings).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

3. Third-Party Services

We use the following third-party services that may collect data:

• Firebase (Google) — Authentication, Analytics, Crashlytics, Cloud Messaging.
• Google Analytics — Website traffic analysis and visitor behavior tracking.
• Google AdSense — Ad serving on our website (promptvault.online). AdSense uses cookies to serve ads based on your browsing history. See how Google uses data.
• Google AdMob — Ad serving and mediation in our mobile app.
• AppLovin MAX — Ad mediation (optional waterfall).
• RevenueCat — Subscription management.
• Cloudinary / Cloudflare R2 — Image hosting and delivery.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

4. Data Storage and Security

Your account data is stored in Google Cloud Firestore with security rules that restrict access to authenticated users. Prompt data is stored on our backend servers. We use HTTPS for all data transmission and Firebase Authentication tokens for API authorization.

Local data (saved prompts, liked prompts, collections) is stored on your device using encrypted local storage. This data is cleared when you sign out.

5. Your Rights

• Access and portability: You can view your saved prompts, collections, and profile data within the app at any time.
• Deletion: You can delete your account from the Profile screen. This removes your Firestore user document and all associated data.
• Opt out of ads personalization: Adjust ad preferences in your device settings or subscribe to the Pro plan to remove all ads.
• Notifications: Manage push notification preferences in your device settings.

6. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (you can also delete your account from the Profile screen).
• Right to restrict processing: Request that we limit the processing of your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing of your data for direct marketing or based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where we rely on consent as the legal basis for processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Your Rights Under CCPA (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request information about the categories and specific pieces of personal data we have collected about you.
• Right to delete: Request deletion of personal data we have collected from you.
• Right to opt-out: Opt out of the sale of your personal information. We do not sell your personal data.
• Right to non-discrimination: You will not receive discriminatory treatment for exercising your CCPA rights.

To exercise these rights, email us at [email protected]. We will verify your identity before processing your request.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal obligations). Anonymous, aggregated data may be retained indefinitely for analytics purposes.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: [email protected]