Privacy Policy
Last updated: 12 September 2026
Vaulta is provided by Lucencrest ("we", "us"). Vaulta is a ledger application that lets a workspace operator record money held on behalf of customers and family members, and lets those fund owners view their own balances. This policy explains what information the app handles, why, and the choices you have.
1. Two kinds of users
Operators create a workspace and record transactions. Fund owners (customers) are people whose accounts an operator records, and who may be given a login to view their own balance. Information about a fund owner is entered by the operator, who is responsible for having that person's agreement to keep it in Vaulta.
2. Information we collect
- Account details: your name, phone number, and optionally an email address or username, plus a PIN or password stored only as a secure hash.
- Workspace and ledger data: customer names and phone numbers, account balances, transactions (amount, currency, date, note), statements, zakat calculations, and any receipt photos or documents attached to a transaction.
- Device and session data: device type, app version, and the IP address and time of sign-in, used to protect your account and to keep an audit trail of changes.
- Contacts (optional): if you choose to add a customer from your phone's contacts, the selected name and number are copied into your workspace. We do not upload your whole address book.
3. How we use it
- To run the service: keep your ledger, sync it between devices, generate statements and receipts, and calculate zakat.
- To notify fund owners when a transaction is recorded on their account, if they have the app installed.
- To secure accounts: detect repeated failed sign-ins, expire sessions, and keep an immutable audit log of who changed what.
- To support you and to improve the app.
We do not sell personal information, we do not use your ledger data for advertising, and the app contains no advertising or analytics trackers.
4. Sharing
- Within your workspace: staff you invite see the data their role allows. A linked fund owner sees only their own accounts.
- Service providers: hosting and, where enabled, push-notification delivery, strictly to operate the service.
- Legal: where required by applicable law or to protect the rights and safety of users.
5. Offline data on your device
Vaulta keeps a local copy of your workspace on your phone so it works without a connection. That copy is protected by your PIN and, if enabled, fingerprint or Face ID. Biometric checks are performed by your phone's operating system; Vaulta never receives your fingerprint or face data. Signing out removes the local copy.
6. Retention
Ledger entries are never deleted while a workspace exists, because corrections are recorded as reversals rather than edits. If a workspace is closed, its data is removed or anonymised within a reasonable period, except where we must keep it to meet legal obligations.
7. Your choices
- Update your profile and change your PIN or password in the app.
- Turn notifications off in your phone settings or by signing out of a device.
- Ask the operator of a workspace to correct or remove your details, or to unlink your login.
- Request a copy or deletion of the personal data we hold about you. See Delete your account.
8. Security
Traffic between the app and our servers is encrypted. Credentials are stored as hashes. Balance changes are written under database locks and every change is audit-logged. No system is perfectly secure, so please keep your PIN private and sign out of shared devices.
9. Children
Vaulta is intended for adults. We do not knowingly create accounts for anyone under 18.
10. Changes
We may update this policy as the service evolves. The date at the top shows the current version, and significant changes will be announced in the app.
11. Contact
Questions about this policy or your data: support@lucencrest.com.