Effective Date: March 1, 2026
Last Updated: March 1, 2026
Valt Team ("we", "our", or "us") built Valt for Mac as a password manager application for macOS. This Privacy Policy explains how we handle information when you use our app.
1. Our Core Principle
Valt is designed with a zero-knowledge architecture. Your vault data is encrypted locally on your device using AES-256-GCM encryption with Argon2id key derivation, and only you hold the master password to decrypt it. We cannot access, read, or recover your passwords or any stored data.
2. Information We Do NOT Collect
We do not collect, store, or transmit any of the following:
- Your master password
- Your vault items (passwords, notes, cards, bank accounts, identities, licenses, server credentials, or any other stored data)
- Your encryption keys
- Your biometric data (Touch ID)
- Analytics or usage tracking data
- Advertising identifiers
3. Data Stored on Your Device
All vault data is stored locally on your Mac in encrypted form. This includes:
- Vault items: Encrypted using AES-256-GCM with a key derived from your master password via Argon2id.
- Encryption keys: Stored in the macOS Keychain, protected by the Secure Enclave and optionally by Touch ID.
- App preferences: Settings such as auto-lock timing and appearance preferences are stored locally.
4. iCloud Sync (Optional)
If you enable iCloud Sync, your encrypted vault data is synced across your Apple devices via Apple's iCloud (CloudKit) infrastructure. The data remains encrypted at all times — we never have access to your decryption keys. iCloud Sync is governed by Apple's Privacy Policy.
You can disable iCloud Sync at any time in the app settings.
5. Biometric Authentication
Valt supports Touch ID for convenient unlocking on compatible Macs. Biometric data is processed entirely by Apple's Local Authentication framework and the Secure Enclave on your device. We never access or store your biometric data.
6. AutoFill
Valt offers a Credential Provider Extension for password autofill in Safari and other browsers. This feature operates entirely on your device. No credential data is transmitted to external servers.
7. Third-Party Services
Valt does not integrate any third-party analytics, advertising, or tracking services. The only third-party service involved is Apple's infrastructure (iCloud, App Store, Keychain), which is governed by Apple's own privacy policies.
8. Data Export and Deletion
- Export: You can export your vault data as an encrypted backup or CSV file at any time from within the app.
- Deletion: Deleting the app removes all locally stored vault data. If iCloud Sync was enabled, you can manage your iCloud data through System Settings > Apple ID > iCloud.
9. Children's Privacy
Valt is not directed at children under the age of 13. We do not knowingly collect any information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at: