Privacy Policy
Last updated: November 2026. This policy explains how Ederfull AB ("we") handles data on this website and in the Vaulted Moments app.
Controller
Ederfull AB, Per Magnérs Väg 3, 832 96 Frösön, Sweden. Org. no. 559443-2717. Email: axel@ederfull.com
Website
No tracking cookies
We use no tracking or advertising cookies and no analytics tools that build profiles about you. If we add audience measurement in the future, it will be cookieless and privacy-friendly, without personal profiles.
Hosting and server logs
When you visit the website, our hosting provider processes technically necessary data (e.g. IP address, time, page requested, browser type) to deliver the site and protect it from abuse, based on our legitimate interest (Art. 6(1)(f) GDPR). Logs are kept only briefly.
Contact by email
If you email us, we use your details only to handle your request.
Launch waitlist
If you request a launch notification, we store your email address, language, signup section and signup and confirmation timestamps. The purpose is one notification when the app launches. The legal basis is your consent (Art. 6(1)(a) GDPR). Your subscription is activated only after you confirm your email. Data is kept until the launch notification; you can unsubscribe or request deletion at any time. The database uses Lovable Cloud (Lovable with Supabase as the underlying service). Email delivery is not yet activated; the email processor will be named here before sending starts. To prevent abuse, pseudonymised IP and email check values are stored for at most 24 hours, based on our legitimate interest in security (Art. 6(1)(f) GDPR). Your journal content is not processed for the waitlist.
The Vaulted Moments app
On-device encryption
Your entries, photos and notes are stored encrypted with AES-256 on your iPhone. There is no user account and no server where we store your journal. We have no access to your journal content.
Backups
You create backups yourself; they are encrypted and stored wherever you put them (e.g. the Files app or iCloud Drive). They cannot be read without your recovery code.
Optional AI text polish
AI text polish is disabled by default. Only if you enable it and use it on a piece of text, just that selected text is sent to a third-party AI provider to return a revised version. The provider may be located outside the EU; in that case transfers rely on appropriate safeguards (e.g. EU Standard Contractual Clauses). We do not store the text after processing. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by disabling the feature.
Purchases
Purchases and subscriptions are handled entirely by Apple. We receive no payment details, only confirmation of your purchase status.
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority (in Sweden: Integritetsskyddsmyndigheten, IMY, or the authority in your country of residence).