Privacy policy

Version 1.1.0, effective September 24, 2026. Covers the CaptureVault app (iPhone and iPad) and this website.

What we collect

Nothing through the app. Import, text recognition (OCR), classification and search happen on your device.

Who we share with

Nobody. We do not sell data, show ads or track you.

What you control

System discovery, the widget and the Apple model are optional. You can delete one capture or everything at any time.

Who the controller is

The controller is conhecendotudo.com.br, based in Brasília, DF - Brazil. The privacy channel, which also serves as the data protection officer contact (LGPD Art. 41), is contato@conhecendotudo.com.br.

This is the same controller and contact shown in the privacy notice inside the app (Privacy tab, “Privacy Notice”).

The app: everything happens on your device

CaptureVault is a screenshot organizer. It has no account, no server, and sends no data to our servers or anyone else’s. No app data ever reaches us. If a screenshot is stored only in iCloud, Photos downloads the original from Apple’s servers, under Apple’s policy, so the app can read it on the device.

The app imports only the images Photos marks as screenshots, within the access you grant. Recognized text, titles, collections, notes and labels live in a local app database, excluded from device backups. Text recognition uses Apple’s Vision and the assistant uses Apple’s Foundation Models, both on the device; without Apple Intelligence, the app uses local rules.

Legal basis: performance of a contract, that is, delivering the library, search and organization you asked for when you imported a capture (LGPD Art. 7, V; GDPR Art. 6(1)(b)).

What the app processes, always on the device

• The screenshots you import from Photos.
• The text recognized in them and the classifications made by local rules.
• Links visible in that text (source candidates).
• The notes, labels and collections you create, and your privacy settings.
• Content-free audit records showing what was processed and when.

Sensitive content

Screenshots can show passwords, bank details, health data, documents and conversations. The app detects this content on the device, always with local rules and no model, hides the thumbnail, and keeps it out of system search, Siri, the widget, the assistant and exported text. None of it is sent to us.

Permissions and optional features

Photos: the app asks for access to read screenshots and organize them and, only when you confirm, to delete one from Photos. Limited access works.

Spotlight, Siri, Shortcuts and Visual Intelligence (system discovery) stay off until you turn them on in the Privacy tab. Even then they show only non-sensitive captures. Widget titles are optional too.

Artificial intelligence: all AI runs on the device. Manual Only mode turns off the Apple model. We do not use your content to train models, and the app makes no decision with legal effects on you.

Purchase and data Apple handles

You buy the app on the App Store and Apple processes the purchase under Apple’s privacy policy. We do not receive your payment details or your identity.

If you turned on sharing analytics with app developers in iOS settings, Apple may show us aggregated usage statistics and crash reports that do not identify you. Turn this off in Settings > Privacy & Security > Analytics & Improvements.

Retention and deletion

The data stays on your device for as long as you want; nothing expires on a timer. Delete captures one by one or use “Erase All CaptureVault Data” in the Privacy tab, which erases captures, collection names, settings, the widget content and export files. Two things deliberately remain: content-free audit records with no capture reference, and, for each erased capture, the photo identifier and its import dates, so a new import cannot duplicate what you erased. Removing the app erases the rest. Original photos leave Photos only when you confirm deleting each one.

To take your data with you, use “Export Local Metadata” in the Privacy tab. The export is a JSON file created on the device, and it goes only where you send it.

This website

capturevault.app uses no cookies, analytics, ads, forms, scripts, or third-party fonts or content, and we keep no visit logs of our own.

The site is hosted and delivered by Cloudflare, Inc. (United States). To deliver and protect the pages, Cloudflare processes technical metadata about your visit, such as IP address, browser, requested page and time, for a limited time. Legal basis: legitimate interest in keeping the service secure (LGPD Art. 7, IX; GDPR Art. 6(1)(f)).

Cloudflare uses its global network; content is delivered from the data center closest to you, and technical metadata, mostly IP addresses, is processed in the US and Europe for a limited time. That transfer relies on LGPD Art. 33, IX, together with Art. 7, V (necessary to deliver the page you asked for), and never includes sensitive data. Cloudflare acts as a processor, bound by its Data Processing Addendum.

If you write to us at contato@conhecendotudo.com.br, we use your address and message only to reply, and keep the conversation for as long as that takes (LGPD Art. 7, V; GDPR Art. 6(1)(b)).

Your rights and how to use them

Brazil’s LGPD (Art. 18) gives you the right to: confirmation that we process your data; access to it; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data or data processed unlawfully; portability; deletion of data processed on the basis of your consent; information about who we share it with; information about the option not to consent and its consequences; withdrawal of consent; and objection to unlawful processing.

If you are in the European Union, the GDPR (Arts. 15 to 22) gives you equivalent rights, including restriction of and objection to processing.

In the app, the data lives on your device and you control it directly: viewing, correcting, exporting and deleting are all in the app itself. Because we keep nothing that identifies you, we cannot link a request to a person or reach that data for you. For anything else, write to contato@conhecendotudo.com.br. A complete confirmation or access request is answered within 15 days (LGPD Art. 19, II).

Sharing, advertising and tracking

We do not sell, rent or give away personal data. CaptureVault shows no ads, uses no behavioral analytics SDK, does not track you across other companies’ apps and websites, and does not ask for tracking permission (App Tracking Transparency).

We may provide data to authorities when the law or a court order requires it. Because the app sends us no data and we keep no visit logs of our own, that can only reach what arrives by email.

Security

The app database lives in iOS protected storage and is excluded from device backups. Sensitive captures are hidden by default; revealing one takes an action of yours and does not unlock the other surfaces.

This website is served only over HTTPS, with HSTS and a content security policy that allows no scripts to run.

No system is invulnerable. If a security incident may create relevant risk or harm to you, we will notify you and Brazil’s data protection authority (ANPD) within the deadline set by Resolution CD/ANPD No. 15/2024. To report a vulnerability, see security.txt.

Children and adolescents

CaptureVault is not directed to children, shows no advertising and builds no usage profile. It can be used at any age shown on the App Store. Because the app collects no data, we do not process children’s data; parents and guardians can reach us through the privacy channel.

Changes and history

This policy has a version and a date. Relevant changes are announced on this page before they take effect.

The Portuguese version prevails over the English translation if they differ.

Complaints

You can complain to Brazil’s National Data Protection Agency (ANPD) at gov.br/anpd and, in the European Economic Area, to the data protection authority of the country where you live, work or where the alleged infringement took place, listed by the European Data Protection Board. You do not need to contact us first; if you prefer, write to contato@conhecendotudo.com.br.