Privacy Policy - NDT Vault

NDT Vault ("the App") is developed and operated by Edison Iverbotor ("we", "us", "our"). This privacy policy explains how we collect, use, store, and protect your information when you use our mobile application and web services at ndtvault.botor.io.

Our commitment: We do not sell, trade, or share your personal data with third parties for marketing or advertising purposes. Your inspection data belongs to you.

1. Information We Collect

Account Information

When you sign in with Apple, we receive:

Your name (as provided by Apple)
Your email address or Apple Private Relay address
A unique user identifier for authentication

You may choose to hide your email address through Apple's Private Relay feature. We fully support this option.

Inspection Data (User-Created Content)

All content you create within the App, including:

Project names and descriptions
Defect photos (watermarked and originals)
Defect details: categories, dimensions, notes, review statuses
Equipment records: instrument names, serial numbers, calibration dates, certificate numbers
Inspection reports (Raw Data): MT, PT, PA, UT, and Visual inspection records
Diagram images and defect marker positions

This data is created by you and belongs to you. We store it only to provide the App's functionality.

Technical Data

Device type and operating system version (for compatibility)
App version number
Basic connection information when using cloud features

We do not collect: location data, browsing history, contacts, health data, advertising identifiers, or analytics/tracking data.

2. How We Use Your Information

Authentication: To verify your identity and secure your account
Core Functionality: To store and display your inspection data within the App
Cloud Sync: To enable project sharing and real-time collaboration when you opt in
Web Viewer: To display shared projects at ndtvault.botor.io when you generate a share code
Support: To respond to your support requests and communications

3. Data Storage & Security

Local Storage (Default)

All inspection data is stored locally on your device by default using SwiftData. The App works entirely offline. No data leaves your device unless you explicitly use cloud features.

Cloud Storage (When You Opt In)

When you use Cloud Share or Collaborative Project features:

Project data and photos are uploaded to our secure server at ndtvault.botor.io
All data is transmitted over HTTPS with TLS 1.2+ encryption
Server access is protected by rate limiting and input validation
Only users with your specific 6-character share code can access shared projects

Security Measures

HTTPS encryption for all network communications
Secure authentication via Sign in with Apple (no passwords stored)
Server-side rate limiting to prevent abuse
Input validation and sanitization on all API endpoints
Security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options)
Path traversal protection on file uploads

4. Data Sharing

We do not sell, rent, trade, or share your personal information with third parties for their own purposes.

Your inspection data is shared only in these circumstances:

By your action: When you generate a share code, only users with that code can view the project
Collaborative projects: Team members you invite can view and edit shared projects
Legal requirements: If required by law, regulation, or valid legal process

5. Third-Party Services

NDT Vault uses the following third-party services:

Sign in with Apple: For secure authentication. Subject to Apple's Privacy Policy.

We do not use any analytics services, advertising networks, or third-party tracking tools.

6. Data Retention

Local data: Remains on your device until you delete it or uninstall the App
Cloud data: Retained as long as the shared/collaborative project exists
Account data: Retained until you request deletion

You may delete your cloud data at any time by removing shared projects from within the App or by contacting us.

7. Your Rights

You have the right to:

Access your personal data stored in the App and our servers
Export your inspection data as PDF reports or ZIP archives
Delete your account and all associated cloud data
Opt out of cloud features entirely and use the App offline-only
Correct any inaccurate personal information
Restrict processing by revoking app permissions in device settings

To exercise any of these rights, contact us at edisoniverbotor@gmail.com. We will respond within 30 days.

8. Children's Privacy

NDT Vault is a professional tool designed for adult NDT inspectors and engineers. The App is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. International Users

NDT Vault's cloud services are hosted in the United States. If you access the App from outside the United States, please be aware that your data may be transferred to and processed in the United States. By using cloud features, you consent to this transfer.

10. Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the revised policy. For significant changes, we will provide notice through the App.

11. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:

Email: edisoniverbotor@gmail.com

Developer: Edison Iverbotor

Website: ndtvault.botor.io