Privacy Policy

Welcome to APKVault, an APK and XAPK extractor and app analyzer for Android. We are committed to protecting your privacy and being transparent about how we handle your information. This policy describes what data we collect, how we use it, and the control you have over it.

APKVault is designed from the ground up to work completely offline for its core functions. Extracting, backing up, and analyzing apps never requires an internet connection. The only components that connect to the network are the optional advertising SDK (Google AdMob) and the UMP consent framework, both of which are governed by Google's privacy standards.

By using APKVault, you agree to the practices described in this policy. If you disagree, you may stop using the application at any time.

📋 Information we collect

Data generated by core app functions

• The list of installed apps on your device (package names, labels, version info, file paths) — processed locally to display the app list and perform extractions
• Extracted APK and XAPK files saved to your chosen local storage folder
• Extraction history records stored in a local Room database (app name, package, output URI, format, size, date)
• Apps marked as favorites, stored locally on your device

Data collected by advertising (AdMob)

• Advertising ID (Google Ad ID) for ad personalization, if consent is granted
• Device model and Android version
• Ad interaction data (impressions, clicks) collected by Google
• Approximate location derived from IP address (by Google, not by us)

Data we do NOT collect

• Your name, email address, or any personal account information
• The contents of your extracted APK files
• Any data from the apps you analyze (permissions, manifest, trackers are read locally)
• Photos, contacts, messages, or any data unrelated to the app's functions
• Location data of any kind

⚙️ How we use your information

• Display all installed apps (user apps, system apps) with filtering and search
• Extract apps as APK or XAPK files, handling split APKs correctly
• Save an organized extraction history with file validation and orphan detection
• Analyze installed apps: permissions, trackers, components, manifest, and signature — all processed locally
• Manage your favorites list across app sessions
• Display advertisements via Google AdMob to support the free version of the app
• Determine whether to show personalized or non-personalized ads based on UMP consent

🔐 App permissions

APKVault requests the following permissions on your Android device:

Detail of each permission

🧩 SDKs and third-party services

APKVault integrates the following external services. Each operates under its own privacy policy, linked below. All other libraries used (OkHttp, Gson, Glide, Room, AndroidX) process data locally and do not transmit information to third-party servers.

📣 Advertising

APKVault displays ads to support its continued development as a free application. We use Google AdMob with the following behavior:

Ad types and timing

• Interstitial: Shown once per extraction, after the progress sheet closes and the user's result is ready. Never interrupts an ongoing extraction.
• Native: Shown inline within the app detail screen, only after loading successfully.
• Banner: Shown in the Dev Mode screen only. Follows the activity lifecycle (paused and resumed with the screen).
• App Open: Shown when resuming the app from background. Suppressed during active extractions and while another ad is visible.

Data collected by AdMob

• Advertising ID (if consent was granted)
• Device model and Android OS version
• Ad interaction events (impressions, clicks)
• Approximate location inferred from IP address (by Google)

💾 Data storage

Stored locally on your device

• Extracted APK and XAPK files in your chosen output folder
• Extraction history in a local Room database (app name, package, URI, format, size, timestamp)
• Favorites list in a local Room database
• App preferences (selected filter, navigation state) via SharedPreferences
• UMP consent status managed by the Google UMP SDK

Stored on our servers

• Nothing. APKVault does not operate any backend server. No data from your device is transmitted to us.

Stored on Google's servers

• Ad interaction data and consent status managed by Google AdMob and UMP, subject to Google's Privacy Policy

🛡️ Security

• All core functions (extraction, analysis, history, favorites) are performed entirely on-device — no network transmission of app data
• Extracted files are saved using the Android Storage Access Framework, which limits file access to the folder you explicitly choose
• APKVault reads APK files using Android's PackageManager and file APIs — it never executes or modifies the apps it analyzes
• The local Room database is stored in the app's private data directory, inaccessible to other apps without root
• AdMob and UMP connections use HTTPS with certificate pinning enforced by the Google Mobile Ads SDK
• The Dev Mode analyzer (permissions, trackers, manifest, signature) reads data locally from the APK file using Android's PackageInfo APIs — no data is sent anywhere

👶 Children

APKVault is not directed at children under the age of 13. We do not knowingly collect personal information from children. Because APKVault does not collect personal data from any user (regardless of age), no special risk applies. However, if you are a parent or guardian and believe your child is using the app, please review this policy with them. The advertising content served by AdMob is subject to Google's family policies for ad targeting.

⚖️ Your rights

Because APKVault does not collect or store personal data on our servers, most data control actions can be performed directly on your device:

• Delete extraction history: Use the delete action within the Extracted tab of the app
• Remove favorites: Manage them directly in the Favorites tab
• Revoke permissions: Go to Settings → Apps → APKVault → Permissions on your device
• Opt out of personalized ads: Disable the Advertising ID in Settings → Google → Ads
• Withdraw ad consent (EEA users): Contact us to reset your UMP consent status, or reinstall the app to trigger the consent dialog again
• Delete all app data: Uninstall APKVault from your device — all local data is removed automatically

If you have a request that cannot be fulfilled on-device, contact us at the address below and we will respond within 30 business days.

🔄 Changes to this policy

We may update this policy periodically to reflect changes in the app's features or applicable regulations. Any changes will be published on this page with an updated revision date. For significant changes that affect your rights, we will update the policy version shown in the app's store listing.

Continued use of APKVault after any modification constitutes your acceptance of the updated policy.

✉️ Contact

If you have questions, concerns, or requests related to this privacy policy or the handling of your data, you can reach us at:

We are committed to responding to your request within 30 business days.