Privacy Policy

Your account: name, email address, and — only if you give them — phone and WhatsApp number, plus your language choice.

Your group activity: the names (or shares) you hold in a group, contributions recorded for you, payouts sent to you, Solidarity and capital fund entries, and notes an admin adds to a record.

Billing: if a group owner subscribes, our payment provider handles the card. We only store the subscription status and period, never card numbers.

We do not sell your data, and we do not use it for advertising.

To keep an accurate shared record for your savings group, to show each person what they have paid and what is owed, to email you when something about your own money changes, and to bill a group owner who chooses a paid plan.

Members of a group see each other's display names and the group's contribution and payout records — that transparency is the point of a savings circle.

Phone numbers, WhatsApp numbers and email addresses are shown only to the group's admins, so they can chase a payment or send a pot. Other members see a display name only.

People outside your group see nothing. Group pages are private and are not indexed by search engines.

Only the services that make Vault work: our hosting and database provider, our email sending service, and our payment provider for subscriptions. Each handles the data on our instructions and nothing more.

We disclose data otherwise only if the law requires it.

We email you when money is recorded for you or a payout is sent to you, and we send account emails such as password reset.

The switch at the bottom of your dashboard turns group update emails off, and so does the unsubscribe link in any of those emails. Account and billing emails continue, because they are part of the service.

Group records are kept for as long as the group exists, because they are the group's financial history. Deleting a group removes its records permanently.

Your profile is kept while your account is open. We cannot remove an account that still owns a group or holds an active membership — leave or hand over those groups first, then ask us to close it.

You can see and correct your details from your account at any time. You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it where the rules above allow.

Write to us at xodusvault.com/contact and we will answer.

Data is stored on managed, encrypted infrastructure, and access rules are enforced on the server — not just in the app — so one group can never read another group's records. No system is perfect, so keep your password to yourself and tell us if something looks wrong.

If this policy changes, the date at the top changes with it.

Questions or a privacy request: xodusvault.com/contact.