Account & Data Deletion Policy

1. In-App Complete Data Wipe (Instant Purge)

HastVault features a dedicated, 1-tap complete data deletion tool built into the application:

1. Open HastVault and authenticate using your biometric unlock or PIN.
2. Navigate to the Settings tab from the bottom navigation bar.
3. Scroll down to the Danger Zone section.
4. Tap "Delete All Data".
5. Confirm the deletion prompt.

What happens when you confirm:

• The local encrypted SQLCipher SQLite database (hastvault.db) is permanently destroyed and overwritten.
• The cryptographic master keys inside the hardware Android KeyStore are permanently revoked.
• All PIN hashes, encryption salts, and application preferences are wiped clean.
• The application immediately resets to a pristine first-launch state. This action is irreversible.

2. Deleting Individual Records

You can selectively delete any single asset or nominee record without purging your entire vault:

• Asset Records: Open the asset detail view, tap the Trash icon or menu options, and confirm deletion. The record is permanently excised from the local encrypted database.
• Nominee Records: Open the Nominees screen, select the nominee, and tap Delete Nominee. Any linked asset mappings will be automatically unlinked.

3. Application Uninstallation

If you uninstall HastVault from your Android device:

• The Android operating system immediately wipes the app's isolated sandbox storage directory.
• All local database files, cached thumbnails, and preferences are automatically deleted by Android.
• The hardware KeyStore keys associated with HastVault's package UID become unusable.

4. Deleting Exported Backup Files (.hastvault)

If you previously created an encrypted backup file using Settings > Export Backup:

• Open your device's Files or File Manager app.
• Search for files with the extension .hastvault (or check your Downloads/Documents folder).
• Delete the file(s) and empty the recycle bin.
• If you uploaded the backup file to personal cloud storage (e.g. Google Drive, Dropbox), open your cloud drive app and delete the file from your cloud account.

5. Statutory Rights (DPDP Act, 2023 & GDPR)

Under India's Digital Personal Data Protection (DPDP) Act, 2023 and the EU General Data Protection Regulation (GDPR), data principals have an absolute Right to Erasure / Right to be Forgotten.

Because HastVault adheres strictly to the principle of Data Minimization and does not collect or transmit data to remote servers, all data erasure actions are instantaneous, autonomous, and physically guaranteed on-device.

6. Questions or Assistance

If you need assistance or have questions regarding data deletion in HastVault, please contact our privacy response desk: