Skip to content

Privacy policy

KAPEVault does not collect your data. Your vault is encrypted on your device, and it only travels to storage you choose.

Effective 28 September 2026

What we collect

Nothing, from the apps. KAPEVault has no account, no analytics, no telemetry, no ads and no crash reporting. BrewedOps runs no server the apps talk to, so we never see your vault, your master password or how you use the app.

What the apps keep on your device

  • The vault file, encrypted. On Windows it lives in %APPDATA%\KAPEVault, on Android in the app's private folder.
  • A settings file with nothing from the vault in it: window size, theme, your choices, a random install ID, and the path of your copy folder if you set one.
  • Small working files, such as the count of wrong password tries and the Windows Hello or fingerprint record.

Uninstalling the Windows app leaves the vault in place, on purpose. Uninstalling the Android app deletes the vault on that phone.

What leaves your device

The apps make only these connections, and each one starts with something you set up or tap:

  • Cloud backup and sync, once you connect a Cloudflare R2 bucket: the encrypted vault file and the Forever Opener page go to your bucket (an address ending in r2.cloudflarestorage.com), and your other devices' encrypted backups come back. Backup names hold a random install ID and the time, nothing about you.
  • Links you open: a website saved in an item opens in your own browser.
  • Air Wall Test on Windows: when you press Test, the app tries one connection to 1.1.1.1 on port 443 and sends nothing, to see whether Windows blocks it.

Cloudflare stores your bucket under your own agreement with Cloudflare. If your copy folder is inside OneDrive, Google Drive or Dropbox, that app uploads the encrypted file under its own terms. Windows, Android and your browser follow their own policies.

This website

This site is a set of static pages. It sets no cookies, stores nothing in your browser, and runs no analytics, trackers or third-party scripts. Its fonts, images and film are served from this site.

The company that hosts the site may keep standard server logs (IP address, browser, page requested, time) for security and to keep the site running. We do not use them to identify or track you.

Your control

Everything KAPEVault stores is on your devices or in your bucket, so you can copy or delete it yourself. We hold nothing about you to hand over or erase.

Changes and contact

If this policy changes, this page and its date change with it. KAPEVault is provided by BrewedOps (Kenneth Villar) in the Philippines. Questions: kvillarmain@gmail.com.