Legal

Privacy Policy

Last updated: July 10, 2026

Introduction

Vault Hollandia ("the App", "we", "our", or "us") respects your privacy and is committed to protecting your information. This Privacy Policy explains what information is processed, how it is used, and your rights when using the Vault Hollandia App and the website https://hollandia.the-vault.vip ("the Website").

Who Is Responsible (Data Controller)

Vault Hollandia is an independent project developed and operated by André, an independent developer based in the Netherlands, publishing under the name Hollandia Noir.

For all privacy-related questions and requests, contact: [email protected]

Information We Collect

Vault Hollandia is designed with privacy as a core principle. The App does not require account registration, email addresses, phone numbers, or other personally identifiable information to function.

Information stored within the App may include:

• Collection records
• Precious metal holdings
• Notes and inventory information
• Photos added by the user
• Usernames (local profiles)
• PIN codes
• Recovery passphrases

This information is stored locally on your device and is never transmitted to developer-operated servers. Because this data never leaves your device, we have no access to it.

Local Data Storage

All collection data, inventory records, photos, notes, and related information are stored locally on your device.

Vault Hollandia does not upload or synchronize your collection data to any developer-operated cloud service or server.

Data stored within the App is protected using encryption technologies and security measures designed to help prevent unauthorized access.

Server Connections and Technical Data

Some App features connect to a server operated by the developer, and the Website is hosted on developer-operated infrastructure. These connections are used only for:

• Retrieving current precious metal prices
• Retrieving in-app announcements
• Checking for App updates
• Serving the Website

When your device connects to a server, standard technical connection data is processed, as with any internet service. Our web server (Nginx) keeps access logs that may include your IP address, the time of the request, and the resource requested. These logs are used solely for security, troubleshooting, and keeping the service running. They are not used to identify or profile anyone, are not shared with third parties, and are periodically deleted.

These requests never contain collection data, inventory data, or other personal information.

Our infrastructure uses Cloudflare as a security and delivery layer. Cloudflare may process connection data (such as IP addresses) on its own systems to protect against attacks, under Cloudflare's own privacy policy. The Windows version of the App checks for updates via GitHub Releases (operated by GitHub, Inc. in the United States); these requests contain no personal data beyond the technical connection itself.

The legal basis for this minimal technical processing is our legitimate interest in operating and securing the App and Website (Art. 6(1)(f) GDPR).

Release Notification List (Email Signup)

If the App is not yet available for your operating system, you may optionally sign up with your email address to be notified when it is released.

• What we collect: your email address only
• Why: to send you a one-time notification when the App becomes available for your platform
• Legal basis: your consent (Art. 6(1)(a) GDPR)
• Retention: your email address is deleted after the release notification has been sent
• Your control: you can withdraw at any time before that by emailing [email protected] and asking to be removed from the list; we will delete your email address promptly

Your email address is stored on private, developer-controlled infrastructure only — never with any third-party service. It is never shared, never used for marketing beyond the release notification, and never combined with any other data.

Push Notifications and Announcements

The App periodically checks a developer-operated server for announcements (such as updates, general news, or feature information). No push notification service or device tokens are used — the App simply retrieves announcements itself.

These requests contain no collection data or personal information.

Backups

The App may allow users to export backup files. Exported backups are created and controlled entirely by the user.

Vault Hollandia does not automatically upload backups to developer-operated servers or cloud storage services.

Users are solely responsible for securing and managing exported backup files.

Photos and File Access

The App may request access to photos and files you choose to import, in order to:

• Attach photos of collection items
• Store photos within the App
• Import data
• Export backups

The App does not use your device camera. Photos are stored locally on your device, encrypted, unless manually exported by the user.

Analytics and Tracking

Vault Hollandia does not use:

• Behavioral tracking
• User profiling
• Third-party analytics platforms

We do not sell, rent, share, or monetize user data.

Third-Party Services

The App may communicate with third-party services solely for:

• Retrieving precious metal pricing data
• Checking for and downloading App updates (Windows version: GitHub Releases)
• Delivering application functionality

Only the minimum technical information required for these services to operate is exchanged.

Donations are processed externally by PayPal, under PayPal's own terms and privacy policy. We do not receive or store your payment details.

Data Security

We take reasonable measures to help protect user data through encryption, secure application design, and ongoing improvements to the App.

However, no method of electronic storage, software development, or data transmission can be guaranteed to be completely secure. While we continuously work to improve security and reliability, users acknowledge that all software carries inherent risks.

Development Transparency

Vault Hollandia is developed primarily with Claude, Anthropic's AI coding assistant. In practice, this means the application's code is written by Claude, working under the direction of the developer, who is not a professional programmer.

The developer defines all requirements, makes all design decisions, and sets the App's privacy and security principles — including local-only storage, encryption, and the strict rule that collection data never leaves your device. New versions are tested by the developer through hands-on use, and the code is additionally checked through independent AI-based security reviews using multiple separate AI models. The App has not been professionally audited by a human security firm.

We believe in being fully open about how the App is made. We continuously work to improve the App's security, stability, privacy protections, and overall user experience through ongoing testing, iteration, and refinement.

Independent Project Disclaimer

Vault Hollandia is an independent passion project. The App is not operated by a corporation, financial institution, investment company, cybersecurity firm, or other professional organization.

The App is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express or implied.

While we make reasonable efforts to maintain security, stability, and functionality, we do not guarantee that the App will always be free from bugs, vulnerabilities, interruptions, inaccuracies, or data loss.

No Financial, Investment, or Legal Advice

Vault Hollandia is intended solely as a collection, inventory, and precious metals tracking tool. Any pricing information displayed within the App is provided for informational purposes only.

Nothing within the App should be considered financial, investment, trading, tax, accounting, or legal advice. Users should conduct their own research and consult qualified professionals before making financial or investment decisions.

User Responsibility for Backups

Users are strongly encouraged to maintain secure backups of their data. Vault Hollandia is not responsible for data loss resulting from:

• Device failure
• Hardware defects
• Accidental deletion
• Corrupted storage
• Theft or loss of a device
• Loss of exported backup files
• Software issues
• Circumstances beyond our reasonable control

Users remain responsible for safeguarding their own data and backup files.

Children's Privacy

Vault Hollandia is not directed toward children. We do not knowingly collect personal information from minors. If you believe a minor has provided us with an email address through the release notification list, contact us and we will delete it.

Your Rights

Because your collection data is stored locally on your device, you retain direct control over that information. You may:

• Delete your data at any time
• Export your data for backup purposes
• Uninstall the App to remove locally stored information, subject to your device's storage behavior

If you are in the EU/EEA, you also have rights under the GDPR regarding any personal data we process (in practice, this is limited to the release notification email list):

• Access, correction, and deletion: email [email protected] and we will handle your request promptly — for example, removing your email address from the notification list
• Withdrawal of consent: you can withdraw your consent to the notification list at any time
• Complaint: you have the right to lodge a complaint with your national data protection authority; in the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced through the App's announcements feature and/or on the Website. The "Last updated" date at the top of this document will always reflect the current version.

Contact Information

If you have any questions regarding this Privacy Policy, please contact: [email protected]