GDPR Compliance

Vaultium | Last updated: March 2026

Our Commitment

Webito Future Tech s.r.o., operating Vaultium, is fully committed to GDPR compliance. As a Czech Republic company within the EU, GDPR applies directly to all our operations.

Privacy by Design

Vaultium is built with privacy at its core:

  • The app collects zero personal data
  • All 2FA secrets are encrypted locally with AES-256
  • No cloud sync, no analytics, no tracking
  • The app has no internet permission in release builds
  • Master encryption key exists only on the physical Vaultium device

Data We Process

The only personal data we may process:

  • Email address (if you contact support)
  • Shipping info (if you purchase devices, handled by payment processor)

The app itself processes zero personal data on our servers.

Your Rights

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)

Requests handled within 30 days. Contact: privacy@vaultium.io

Supervisory Authority

Office for Personal Data Protection (UOOU)

Prague, Czech Republic

EU users may also contact their local data protection authority.

Contact

Webito Future Tech s.r.o.

Prague, Czech Republic

Email: privacy@vaultium.io