Effective October 19, 2026. This notice covers The Vault Society, its cloud service and the player-help website at vaultsociety.gretek.com. It describes the paid public-release configuration; older TestFlight and Android builds can have different local testing tools, as explained below.
Who operates the game
Paravit, LLC dba Gretek develops and operates The Vault Society. Contact support@gretek.com about the game or this notice. Please do not send passwords, payment-card details or private recovery keys.
Progress saved on your device
The game stores puzzle progress and arrangements, discoveries, awards, points, historical balances and receipts, preferences and member information on your device. You can create multiple local members without providing an email address or setting a password. One member name identifies you in the game and public Society standings. The game assigns a unique Member number. A suitable available custom name can be changed for free through server reservation and validation. Removed member identities are not reused.
Normal release play does not record beta activity counters or gesture traces. It can save the support notes you deliberately create, with puzzle/version/platform context. Internal development builds may record local testing activity, and old beta reports remain on the device for compatibility; the public UI has no statistical report export. Customer notes are not automatically sent and are excluded from the game’s cloud-save payload.
Automatic encrypted backups and recovery
With internet access, the current game sends encrypted copies of member saves to our service at vault-api.gretek.com. A save can include discoveries, puzzle state, awards, balances, preferences, earned ownership and the member's Society connection details. The service also retains a recovery identifier derived from an authorization secret, a revision number, save timestamps and a small number of recent encrypted revisions.
Encryption and authentication happen on your device. The private recovery key is stored there and is not sent to the backup service. The server cannot decrypt the stored save using its backup records alone. We cannot recover that encrypted progress if you lose every copy of your key and usable device data. Anyone who obtains the key may be able to recover the member.
Your key is not included in the encrypted save, published in standings or included in the voluntary report export. A whole-device backup or a copy you save yourself may contain it and is governed by the settings of that backup or storage service.
Society standings
When connected, the game confirms a random player identifier and unique Member number or existing suitable public name with the Society service. Custom names are checked for availability and suitability before a free change. The service holds checked names briefly and limits repeated checks. It sends puzzle award information, including puzzle identifiers, mistakes, assistance flags, earning dates and per-story standings-attempt information, so the service can calculate standings. Some bonus claims include the answer for checking. The game sends a local time-zone offset when requesting standings. Registered members can refresh their scores while the app is active. Daily, Weekly, Monthly and All-Time standings use UTC periods. An explicitly requested story-points reset changes the counted attempt; historical attempt and award records remain.
Other connected players can see the nickname, player identifier, points and rank returned in standings. Avoid using a real name or contact information as a public nickname. These identifiers are pseudonymous; that does not make the records anonymous.
Paid app and historical purchase records
The public configuration is a one-time paid app with no in-app purchases, advertising, advertising SDK or tracking prompt. Both stories, current optional puzzles, cabinet finishes and Pip are included. Free public-name changes do not require an Apple transaction or purchase credit. Apple handles the App Store app purchase; the game does not receive your Apple password or payment-card details.
Older beta saves and internal QA may contain Sandbox transaction identifiers, buyer tokens, receipt/ownership records, name-change credits and a device purchase journal. These records are preserved for compatibility; some appear inside encrypted member backups. The full device purchase journal is not separately uploaded to the game API. The server retains legacy name-change transaction verification/credit records and compatibility routes. Public UI does not offer purchase, restore, paid refills or demo ads. Internal QA tools do not describe the public release’s data flow.
The release does not use an advertising identifier or send behavior to an advertising network. Future live ads, account sign-in or in-app payments would require a new data-flow and privacy review before activation.
Reminders and device controls
Optional Society reminders are scheduled locally on your phone. The game stores notification choices on the device and asks the operating system for notification permission when you enable reminders. It does not register a remote push token with our game server. You can disable reminders in the game or phone settings.
The current game does not request access to your contacts, location, camera, microphone or photo library for gameplay. It uses the device clock and time zone for local schedules. Playing music or a sound clue does not record your microphone.
Support and beta feedback
If you email support, send TestFlight feedback or share a local report, we receive the information you choose to send. That may include your email address, message, screenshots, report identifier, puzzle activity and technical details. We use it to answer requests and improve the game. Review screenshots and notes before sending them.
Apple operates TestFlight separately and makes tester feedback, usage and diagnostic information available to developers under its beta-testing terms. TestFlight collection is distinct from the game's local playtest report. This notice does not replace Apple's own privacy information.
Hosting and operational information
Google Cloud hosts the game service, this website and operational backups in the United States. Cloudflare provides DNS for the service and website; both use DNS-only routing. Fastmail processes messages addressed to support@gretek.com. Providers may process information in other countries under their own applicable arrangements. Read the providers’ privacy information: Google, Cloudflare, Fastmail and Apple.
Network systems process IP addresses to deliver requests and protect the service. Server logs contain request and error information such as a remote-host field, request path, response status, response size and time. The API uses client-address information for temporary abuse limiting. Operational monitoring reports aggregate service health and capacity. It does not upload player save contents or keys.
We use this information to provide saves and standings, deliver requested features, answer support requests, investigate problems and protect the service. We use service providers for hosting, backup, operations and support. We do not sell game or website information or share it for advertising across other companies’ apps or websites. We may disclose information when required by law or when necessary to protect people or the service.
The player-help website does not set analytics or advertising cookies, use third-party trackers, or load external fonts or scripts. Visiting it involves ordinary network processing, including your IP address. The Manage your data page derives authorization and decrypts a member preview locally, including current story backups. It does not send your private recovery key or plaintext save to the service or store them in browser storage. After you confirm deletion, it sends derived authorization, the selected backup revision and, if connected, the Society credential needed to remove the selected records. A browser extension or password manager operates separately from this page.
Retention and your choices
Local data remains until it is removed or replaced through the app or device. Removing the app or choosing Start fresh does not itself delete server standings or cloud backups.
We keep active standings, member-name records and encrypted recovery records until you delete them. After deletion, name-change transaction hashes remain without the member association while the service operates to prevent reuse of previously credited purchases. The service keeps the current encrypted save and a small number of earlier revisions. The authenticated deletion service can remove a member’s active cloud backup, saved revisions and connected Society record after ownership verification and explicit confirmation. Open Settings → Privacy & data → Delete member’s cloud data in the public app, or visit Manage your data directly. Back up the selected member first, copy its private key from Save & recovery, then close the game while reviewing and confirming deletion. Older builds can use the website directly. Use a current backup containing the Society connection to be removed, and handle each member separately. Never email your key to support.
A deletion request disables the old cloud credentials immediately after it is accepted. An accepted request has a pending or completed receipt; completion normally takes a few minutes. If it remains pending or you need help, contact support with the confirmation reference, never the recovery key. We retain only hashed revoked identifiers, an opaque reference, the selected revision and request/completion times while the service operates, to honor the deletion and prevent old devices or restored backups from recreating those records. These records do not contain your key, nickname, save contents or gameplay.
Restricted operational backups expire on a thirty-day schedule. Google Cloud then retains deleted backup objects in its seven-day recovery window; provider processing can affect the exact removal time. Server-local backups and scheduled disk snapshots have shorter, roughly seven-day retention. Restricted operational export and migration copies follow the thirty-day policy. Deleted members are excluded when restoring a backup by reapplying the separate deletion record before serving players.
Request and error logs rotate by size, currently up to three ten-megabyte files per service container. They do not have a fixed age-based expiry. These logs are restricted to operations and are not used to profile players. Closed support conversations and reports we receive are retained for twelve months, then removed, unless an unresolved dispute or legal obligation requires limited longer retention. Records held independently by Apple or another provider follow that provider’s policies.
Cloud deletion does not erase files already stored on your phones, cancel a store purchase or request a refund. To remove local data, remove the app and any device backups or exported copies you control; first protect other members you want to keep. Start fresh resets story gameplay; it is not member or cloud-data deletion. Members & saves → Remove removes one member’s local progress separately. After the app learns that cloud credentials were deleted, that member can continue locally but cannot back up or rejoin standings; create a separate new member if you want a new online journey. Historical store records are separate from progress recovery; the public app has no restore-purchases control.
You may ask about access, correction or deletion of information we hold by emailing support@gretek.com. Depending on where you live, you may have additional rights to restrict or object to processing, obtain a portable copy, withdraw consent where applicable, or complain to a data-protection authority. We will verify ownership and respond as required by applicable law. A nickname or email alone does not prove ownership of an encrypted save. We cannot decrypt it without a key, and we do not ask you to email that key. For support-message requests, contact us from the address used in the conversation.
You can change sound and reminder preferences, use a non-identifying Society nickname, and choose whether to share a feedback report. Where an optional permission is based on your consent, you can withdraw it through the game or device settings. This does not undo processing already completed.
Audience and changes
The Vault Society is intended for adults and teens, with family appeal. It does not ask for a date of birth. If you believe a child has provided personal information to us, contact support@gretek.com so we can investigate and remove it where appropriate. Do not put a child’s name or contact details in a public Society nickname.
We will update this notice when the game’s data practices change and show the new effective date here. Material changes will be explained through the game or this website. New account, live-advertising or production-payment features will be reviewed before activation.