How Cloud Space protects your files
Cloud Space is privacy-focused cloud storage for personal files: IDs, records, photos and documents you want to keep safe and private. This page explains exactly how it works, what we can and can’t see, and what happens when a plan ends. No vague promises.
Encrypted on your device, before upload
Every file is encrypted on your phone or in your browser with AES-256-GCM before it leaves your device, in 16 MiB parts that each have their own nonce. File names and folders are encrypted the same way. What reaches us is encrypted data.
Your keys stay with you
Your Cloud Space keys are created on your device and kept in your access file (.vaultkey), which is itself locked with your secret phrase (PBKDF2-HMAC-SHA256). We never receive your phrase or your keys. Devices sign in with a digital signature made by your keys (Ed25519), so there is no password stored on our side.
The other side of this: we can’t reset your phrase or recover your access file. Keep the access file in two safe places and your phrase somewhere you trust.
In transit and at rest
Every connection uses HTTPS. Files travel straight from your device to our storage provider, Backblaze B2 (US-West data center), through short-lived upload links, and are stored there only in encrypted form. Backblaze also encrypts stored data at rest (AES-256), on top of your device’s encryption.
What we can see, and what we can’t
| We can see | We can’t see |
|---|---|
| Your Vault ID, plan, size and payments (from Google Play, the Galaxy Store or our payment provider); how many files you store, their sizes and upload dates; the type and name of each signed-in device; your activity history (you see it too, and it can’t be edited); your contact details if you add them. | The contents of your files, their names and folders, your secret phrase and your keys. |
Our hosting provider processes IP addresses to deliver and protect the service (for example, to limit repeated attempts); we don’t store them with your Cloud Space. The public pages count visits in total only, without cookies, and not at all when your browser asks not to be tracked.
What we don’t do
- No scanning or AI analysisWe can’t read your files, so we can’t scan, index or summarise them.
- No ads, no data salesCloud Space shows no ads, and we don’t sell or share your data.
- No third-party code where your keys areThe pages that open your files load code only from this site, enforced by a strict Content Security Policy.
- No automatic renewalOne payment covers one year. Nothing is charged again unless you choose to renew.
Devices and access
One phone and one browser can use your Cloud Space at a time. You can sign a device out at any moment, and the activity history shows every sign-in, device and file change. To use Cloud Space in a browser you can sign in with your access file and phrase, or link the browser with a QR code from your phone; the keys travel between your devices encrypted.
When a plan ends
A plan ends after its year (there is no automatic renewal), or earlier when a payment is refunded. For the next 30 days Cloud Space is read-only: you can open, download and delete your files, but uploads, renaming and moving stop, and the Premium included with the plan ends. The app and this site show the date your files will be deleted.
Renew within those 30 days and everything stays as it was. If you don’t, your cloud files and folders are permanently deleted after the 30 days, once and for good; we can’t restore them. We keep account, payment and audit records as the law requires. Files on your phone are never affected: Cloud Space is a backup, not a mirror.
Cloud Space is separate from the app’s vault
The MyNoteVault app’s vault keeps your files encrypted on your phone, and nothing is uploaded. Cloud Space is optional and separate: it’s a paid service you choose to add, and you decide which files to back up to it. Its plans, data handling and retention rules are the ones on this page.
Honest limits
- Anyone who has both your access file and your secret phrase can open your Cloud Space. Keep them apart, and choose a phrase only you know.
- In a browser, your files are decrypted by code this site delivers. We keep that code on its own domain, with no third-party scripts and a strict security policy; on your phone, the app does the same work.
- We can see the metadata listed above, such as file sizes and dates.
Questions
Can MyNoteVault see my files?
No. Files and their names are encrypted on your device before upload, with keys we never receive. We store encrypted data and can see only the details listed on this page, such as file sizes and dates.
Is Cloud Space end-to-end encrypted?
Your files are encrypted on your own devices and decrypted only on your devices; our servers and our storage provider handle encrypted data only. We can see metadata such as how many files you store, their sizes and dates.
What if I forget my secret phrase or lose my access file?
We can’t recover either one, because we never have them. Keep your access file in two safe places and your phrase somewhere you trust.
Do you scan or analyse my files?
No. We can’t: the files are encrypted before they reach us. There is no scanning, indexing, AI analysis or advertising in Cloud Space.
Where are my files stored?
In a private bucket at Backblaze B2 in its US-West data center, only in encrypted form. Backblaze also encrypts stored data at rest.
What happens when my plan ends?
For 30 days Cloud Space is read-only: you can open, download and delete files, but not upload, rename or move them, and the included Premium ends. Renew within those 30 days to keep everything; otherwise your cloud files are permanently deleted. Files on your phone are not affected.
Does deleting cloud files delete the files on my phone?
No. Cloud Space is a backup, not a mirror: deleting on one side never deletes on the other.
How do I get help?
Email [email protected] or message us on WhatsApp at +91 70112 60590. Never send your secret phrase or access file; we never need them.
Legal terms: privacy policy · terms of use · refund policy. Updated 24 October 2026.