Last updated: October 24, 2026 · JAKISAI SOFTWARE DEVELOPMENT SERVICES, General Santos City, Philippines.
We cannot read your vault. Your contents are encrypted on your own device (AES-256) and your key is split with Shamir's Secret Sharing. Our servers store only ciphertext and key shares that are useless alone. This is a technical fact of the design, not merely a policy promise.
Account data: your name, email address, and login credentials (passwords stored as cryptographic hashes). Vault metadata: the structure of your vault (section names, item counts, sizes, timestamps), your trustee invitations and their acceptance status, check-in history, claim and ceremony records, and audit logs of vault openings. Vault contents: stored only as encrypted ciphertext — never readable by us. Website questions: if you use the contact form on mydiaryvault.com, we store your name, email, and question to reply to you.
Payments are processed by Xendit (Philippines) and Paddle (worldwide). They receive the information needed to charge you; we never see or store your card numbers. We receive payment confirmations and subscription status.
We never sell your data. We never read, mine, or advertise against your vault contents — we technically cannot. We share data only with the processors above, or when compelled by law — and even then, vault contents remain ciphertext we cannot decrypt.
The app uses only essential session storage needed to keep you logged in. No advertising trackers.
You may export all your data from inside the app at any time (unlocked on your device), correct your account details, and request account deletion at [email protected]. Deleting your account permanently destroys your vault and its key shares.
Client-side AES-256 encryption, Shamir 3-of-5 key splitting with a mandatory server share released only inside a verified ceremony, duress decoy support, and full audit logging of every reveal.