Privacy Policy

1. Introduction

ImpactVault ("we", "our", or "us") is operated by Impact Labs, registered in Malaysia. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and website.

2. Information We Collect

Information you provide directly:

• Email address (when joining our waitlist or creating an account)
• Work achievements, meeting notes, and action items you log in the app
• Career goals and target roles you set within the app
• Notification preferences and app settings

Information collected automatically:

• App usage analytics (which features you use, how often)
• Device information (device type, operating system version)
• Crash reports and performance data

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the ImpactVault app and its features
• Send you notifications and reminders you have opted into
• Send you product updates, launch announcements, and relevant emails (you can unsubscribe at any time)
• Improve the app based on how it is used
• Respond to your support requests and feedback
• Process payments and manage subscriptions (when applicable)

4. Data Storage

During our early access period, your achievement data is stored locally on your device using your phone's local storage. This means your data does not leave your device at this stage. We plan to introduce cloud sync in a future update, at which point data will be stored securely on our servers. We will notify you before this change takes place.

Your email address, collected via our waitlist, is stored securely with our email service provider Brevo (formerly Sendinblue).

5. Data Sharing

We do not sell your personal data. We do not share your personal information with third parties except in the following limited circumstances:

• Service providers — We use trusted third-party services to operate ImpactVault, including email delivery (Brevo), analytics (PostHog), and payment processing (RevenueCat). These providers only access your data as needed to perform their services.
• Legal requirements — We may disclose your information if required by law or to protect the rights and safety of our users.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for marketing emails at any time
• Export your data (available as a Pro feature)

To exercise any of these rights, email us at hello@impactvault.app.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

8. Children's Privacy

ImpactVault is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice in the app. Your continued use of ImpactVault after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: