Effective September 23, 2026. This notice covers The Vault Society beta, its cloud service and the player-help website at vaultsociety.gretek.com.
Who operates the game
Paravit, LLC dba Gretek develops and operates The Vault Society. Contact support@gretek.com about the game or this notice. Please do not send passwords, payment-card details or private recovery keys.
Progress saved on your device
The game stores puzzle progress and arrangements, discoveries, awards, points, Insight balances, preferences and explorer information on your device. You can create multiple local explorers without providing an email address or setting a password. The name used to choose an explorer on your phone is separate from a nickname used in Society standings.
The game also records local puzzle activity to help explain problems during testing, such as moves, help visits, submitted answers, time actively playing and optional feedback notes. Those playtest reports stay on the device until you choose to share them. They are excluded from the game's automatic cloud-save payload.
Automatic encrypted backups and recovery
With internet access, the current game sends encrypted copies of explorer saves to our service at vault-api.gretek.com. A save can include discoveries, puzzle state, awards, balances, preferences, earned ownership and the explorer's Society connection details. The service also retains a recovery identifier derived from an authorization secret, a revision number, save timestamps and a small number of recent encrypted revisions.
Encryption and authentication happen on your device. The private recovery key is stored there and is not sent to the backup service. The server cannot decrypt the stored save using its backup records alone. We cannot recover that encrypted progress if you lose every copy of your key and usable device data. Anyone who obtains the key may be able to recover the explorer.
Your key is not included in the encrypted save, published in standings or included in the voluntary report export. A whole-device backup or a copy you save yourself may contain it and is governed by the settings of that backup or storage service.
Society standings
When you connect to world standings, the game registers a random player identifier and either an automatically assigned or chosen nickname. It sends puzzle award information, including puzzle identifiers, mistakes and assistance flags, so the service can calculate standings. Some bonus claims include the answer for checking. The game sends a local time-zone offset when requesting standings. Registered explorers can refresh their scores while the app is active.
Other connected players can see the nickname, player identifier, points and rank returned in standings. Avoid using a real name or contact information as a public nickname. These identifiers are pseudonymous; that does not make the records anonymous.
Purchases and demonstrations
The iOS beta uses Apple's Sandbox for test purchases. Apple's purchase sheet handles the store account and payment interaction; Gretek does not receive your Apple password or payment-card number through the game.
The app receives verified transaction information, including product and transaction identifiers, purchase environment and an app-generated buyer token. It keeps a device purchase journal to deliver each purchase once and share permanent benefits across local explorers. Explorer saves can contain refill-credit receipts and ownership state, which are covered by encrypted backup. The full device purchase journal is not separately uploaded to our game API.
There is currently no live advertising SDK in the game. The optional demonstration ad uses content supplied with the app. Current game code does not use an advertising identifier or send behavior to an advertising network. Production payments, live ads or account sign-in would require a new review of the data practices and this notice before activation.
Reminders and device controls
Optional Society reminders are scheduled locally on your phone. The game stores notification choices on the device and asks the operating system for notification permission when you enable reminders. It does not register a remote push token with our game server. You can disable reminders in the game or phone settings.
The current game does not request access to your contacts, location, camera, microphone or photo library for gameplay. It uses the device clock and time zone for local schedules. Playing music or a sound clue does not record your microphone.
Support and beta feedback
If you email support, send TestFlight feedback or share a local report, we receive the information you choose to send. That may include your email address, message, screenshots, report identifier, puzzle activity and technical details. We use it to answer requests and improve the game. Review screenshots and notes before sending them.
Apple operates TestFlight separately and makes tester feedback, usage and diagnostic information available to developers under its beta-testing terms. TestFlight collection is distinct from the game's local playtest report. This notice does not replace Apple's own privacy information.
Hosting and operational information
Google Cloud hosts the game service, this website and operational backups in the United States. Cloudflare provides DNS for the service and website; both use DNS-only routing. Fastmail processes messages addressed to support@gretek.com. Providers may process information in other countries under their own applicable arrangements. Read the providers’ privacy information: Google, Cloudflare, Fastmail and Apple.
Network systems process IP addresses to deliver requests and protect the service. Server logs contain request and error information such as a remote-host field, request path, response status, response size and time. The API uses client-address information for temporary abuse limiting. Operational monitoring reports aggregate service health and capacity. It does not upload player save contents or keys.
We use this information to provide saves and standings, deliver requested features, answer support requests, investigate problems and protect the service. We use service providers for hosting, backup, operations and support. We do not sell game or website information or share it for advertising across other companies’ apps or websites. We may disclose information when required by law or when necessary to protect people or the service.
The player-help website does not set analytics or advertising cookies, use third-party trackers, or load external fonts or scripts. Visiting it involves ordinary network processing, including your IP address. On Manage your data, your browser uses your recovery key to derive authorization and decrypt a preview locally. The page does not send the private key or plaintext save to our service or store them in browser storage. It sends derived authorization, the selected backup revision and, if connected, the Society credential needed to remove the selected records. A browser extension or password manager operates separately from this page.
Retention and your choices
Local data remains until it is removed or replaced through the app or device. Removing the app or choosing Start fresh does not itself delete server standings or cloud backups.
We keep active standings and encrypted recovery records until you delete them. The service keeps the current encrypted save and a small number of earlier revisions. You can permanently remove an explorer’s active cloud backup, saved revisions and its connected Society record through Manage your data. You will need its private recovery key to prove ownership. The page previews the explorer and asks you to confirm before deletion. Use a current backup so it includes the Society connection you want removed. Each explorer is handled separately.
A deletion request disables the old cloud credentials immediately after it is accepted. The page shows a pending or completed receipt; completion normally takes a few minutes. If it remains pending or you need help, contact support with the confirmation reference, never the recovery key. We retain only hashed revoked identifiers, an opaque reference, the selected revision and request/completion times while the service operates, to honor the deletion and prevent old devices or restored backups from recreating those records. These records do not contain your key, nickname, save contents or gameplay.
Restricted operational backups expire on a thirty-day schedule. Google Cloud then retains deleted backup objects in its seven-day recovery window; provider processing can affect the exact removal time. Server-local backups and scheduled disk snapshots have shorter, roughly seven-day retention. Restricted operational export and migration copies follow the thirty-day policy. Deleted explorers are excluded when restoring a backup by reapplying the separate deletion record before serving players.
Request and error logs rotate by size, currently up to three ten-megabyte files per service container. They do not have a fixed age-based expiry. These logs are restricted to operations and are not used to profile players. Closed support conversations and reports we receive are retained for twelve months, then removed, unless an unresolved dispute or legal obligation requires limited longer retention. Records held independently by Apple or another provider follow that provider’s policies.
Cloud deletion does not erase files already stored on your phones, cancel a store purchase or request a refund. To remove local data, remove the app and any device backups or exported copies you control; first protect other explorers you want to keep. The game’s current Start fresh control is a local gameplay reset, not complete data deletion. Store purchase restoration is separate from progress recovery.
You may ask about access, correction or deletion of information we hold by emailing support@gretek.com. Depending on where you live, you may have additional rights to restrict or object to processing, obtain a portable copy, withdraw consent where applicable, or complain to a data-protection authority. We will verify ownership and respond as required by applicable law. A nickname or email alone does not prove ownership of an encrypted save. We cannot decrypt it without a key, and we do not ask you to email that key. For support-message requests, contact us from the address used in the conversation.
You can change sound and reminder preferences, use a non-identifying Society nickname, and choose whether to share a feedback report. Where an optional permission is based on your consent, you can withdraw it through the game or device settings. This does not undo processing already completed.
Audience and changes
The Vault Society is intended for adults and teens, with family appeal. It does not ask for a date of birth. If you believe a child has provided personal information to us, contact support@gretek.com so we can investigate and remove it where appropriate. Do not put a child’s name or contact details in a public Society nickname.
We will update this notice when the game’s data practices change and show the new effective date here. Material changes will be explained through the game or this website. New account, live-advertising or production-payment features will be reviewed before activation.