Welcome to Valo Vault ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal and non-personal data when you use the Valo Vault Android application, valovault.in, payments.valovault.in, or related Valo Vault services (collectively, the "Services").
By accessing or using the Services, you signify your acceptance of this Privacy Policy. If you do not agree with it, please discontinue use of the Services.
1. Information We Collect
To provide the Services, maintain security, and improve user experience, we may collect the following categories of information:
A. Information You Provide Directly
- Account Data: When you sign in with Google, we receive your name, email address, and profile picture from Google. You also choose a Valo Vault username, and may set a profile picture.
- Riot Account Data: When you link your Riot account through Riot's own sign-in page, we store your Riot account identifier (PUUID), in-game name and tag, and region with your Valo Vault account, to link your game data and sync it across devices. We never see your Riot password. The Riot sign-in session that lets the App fetch your store, collection, match history, and rank is stored on your device and used from your device.
- Riot Friends: If you use Riot Friends, the App connects to Riot's chat service from your device to show your Riot friends and whether they are online, in a match, or in a party. This information is shown on your device and is not stored on our servers. Your own status on that connection is set to offline.
- Messages and Social Features: When you use Global Chat, direct messages, friend groups, or communities, we store the messages, images, reactions, and replies you send, along with your friend list, group and community memberships, and friend requests. Messages you send are visible to the people in that conversation.
- User Generated Content: If you voluntarily submit content to the App (such as uploading custom agent lineups, strategies, or feedback), we collect the text, images, and metadata associated with those submissions.
- Game and Progress Data: Vault Coins, XP, level, streaks, cosmetics you own and equip, purchases, minigame results, and, if you choose to share them, your rank, Vault Worth, and collection.
- Customer Support Communications: If you contact us via email at support@valovault.in, we collect your email address, name, and the contents of your message to properly assist you and resolve your inquiry.
B. Information Collected Automatically
- Device Information: We collect device-specific information needed for security, diagnostics, and app operation, such as hardware model, operating system version, screen resolution, and network information. Advertising partners may process advertising identifiers and related device, network, and ad-interaction information only after you choose Personalized Ads or Basic / Contextual Ads. The contextual option disables personalization but still permits limited processing needed for ad delivery, measurement, frequency control, security, and fraud prevention. If you choose Keep Ads Off, no ad request is made.
- Usage & Interaction Data: Through our analytics partners (such as Google Analytics for Firebase), we log detailed information about your activity within the App. This includes the screens you view, buttons you click, session durations, features you utilize most frequently, and timestamps of your interactions.
- Website Analytics: Our websites use first-party, cookieless counters to record aggregate page views, sessions, broad device category, referral category, and Google Play button clicks. These counters do not store a user ID, advertising identifier, or the full referring URL, and a session marker is kept only in the current browser tab.
- Diagnostic & Crash Data: In the event the App experiences a crash, error, or performance issue, we automatically collect diagnostic information via Firebase Crashlytics. This data includes device state information at the time of the crash, stack traces, and system performance metrics.
- Notification Token: If you allow notifications, we store a Firebase Cloud Messaging token for your device so we can send you the notifications you have enabled, such as Daily Shop alerts and messages.
D. What Other Users Can See
Some information is public to other Valo Vault users by design: your username, profile picture, level, equipped cosmetics, badges, and your public profile; your position and values on leaderboards (such as Vault Coins, XP, and, if you share them, rank and Vault Worth); and anything you post in Global Chat or communities. Your direct messages and friend groups are visible only to their members.
C. Information from Third-Party Partners
- Billing & Purchase History: If you purchase a membership or Vault Coins through Google Play, or complete a web checkout purchase through PayPal on payments.valovault.in (or through Razorpay, which we used previously), we receive the transaction confirmation required to fulfill and support that purchase. This includes transaction/order IDs, purchased tier or coin pack, payment status, amount, currency, timestamp, payment gateway, and account email. We do not collect, process, or store raw credit/debit card numbers, UPI PINs, or banking credentials; all payment data is encrypted and handled directly by PCI-DSS certified payment processors (Google Play, PayPal, or Razorpay).
2. How We Use Your Information
We process your data strictly for legitimate business purposes and to provide the core functionality of Valo Vault. Specifically, we use your information to:
- Provide and Maintain the App: Authenticate users, display accurate in game statistics, sync loadout profiles, and deliver the core features of Valo Vault.
- Process Transactions: Verify membership access, unlock eligible member benefits, and manage virtual economy balances (Vault Coins).
- Personalize the Experience: Tailor the content, UI elements, and data displayed based on your user profile and preferences.
- Improve and Optimize: Analyze usage trends and crash reports to identify bugs, optimize App performance, and develop new features.
- Deliver Advertisements: After an explicit advertising choice, serve either personalized or contextual advertisements through Unity LevelPlay and configured demand partners. Rewarded ads are user initiated; non-opt-in formats are not shown while subscription status is unresolved or Premium is active. Choosing Keep Ads Off keeps all ad formats and ad-backed rewards unavailable.
- Communicate with You: Respond to customer service requests, send critical account updates, and deliver push notifications (only if you have opted in to receive them).
- Keep the Community Safe: Review reported messages and accounts, enforce our Terms of Service, and detect cheating, fraud, and abuse of rewards, minigames, and leaderboards.
- Run Leaderboards and Rewards: Rank players, decide monthly leaderboard winners, and deliver prizes.
3. How We Share and Disclose Your Information
We do not sell personal information for money. If you choose Personalized Ads, advertising partners may use or share device information for ad delivery, measurement, security, and personalization as described below. If you choose Basic / Contextual Ads, personalization is disabled while limited processing may continue for contextual delivery, measurement, frequency control, security, and fraud prevention. If you choose Keep Ads Off, no ad request is made. We may otherwise share data only under the following circumstances:
A. Service Providers
We use trusted third-party providers to operate the Services, perform related services, or help us understand how the Services are used. These providers may access data only as needed to perform their work on our behalf. Key partners include:
- Google LLC (Firebase & Google Cloud): Used for secure cloud hosting, database management, authentication, analytics, and crash reporting.
- Unity LevelPlay and advertising partners: Unity LevelPlay mediates eligible ad requests among Unity Ads, Meta Audience Network, and Liftoff Monetize. These providers may process advertising identifiers, device information, IP address, ad interaction data, and privacy signals to deliver, measure, secure, and, when permitted by your choice, personalize ads. Google AdMob and Google advertising demand are not used.
- Riot Games: The App communicates with Riot Games' services, mostly directly from your device, to sign you in and fetch your store, collection, match history, rank, and Riot friends. Riot's own privacy notice applies to data Riot holds.
- valorant-api.com and other game data sources: Used to fetch public game content such as skin names and images. These requests do not include your personal data.
B. Legal Compliance & Protection
We may disclose your information if required to do so by law, court order, subpoena, or other legal processes. Furthermore, we may disclose your information if we believe in good faith that such action is necessary to investigate fraud, protect the security or integrity of the App, defend our legal rights, or protect the personal safety of Valo Vault users or the public.
4. Data Retention and Security
Data Security: We implement robust, industry standard security practices including encryption in transit (HTTPS) and secure database rules via Google Firebase to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.
Data Retention: We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our legal agreements. In particular:
- Global Chat keeps only the most recent messages; older messages are deleted automatically.
- Direct messages, friend group, and community messages are kept until they are deleted, the group or community is deleted, or you delete your account.
- Account, progress, and purchase data are kept while your account exists. Records of purchases may be kept longer where tax or accounting law requires it.
- Records of moderation actions, such as bans, may be kept after an account is deleted to prevent repeat abuse.
You can delete your account and associated data at any time through our data deletion page (also reachable from Settings > Delete Account in the App), or by contacting support. Copies of messages you sent to other people may remain visible to them where the law allows.
5. Your Data Protection Rights
Depending on your region (such as under India's Digital Personal Data Protection Act, 2023, the GDPR in Europe, or the CCPA in California), you may have certain data protection rights, including:
- The right to access, update, or delete the personal information we have on you.
- The right of rectification (to fix inaccurate or incomplete data).
- The right to object to our processing of your personal data.
- The right to withdraw your consent at any time where we relied on your consent to process your personal information.
- The right to have your grievances addressed, and to nominate another person to exercise your rights if you die or become unable to.
You can review or change your advertising privacy choice in the App under Settings > Privacy & Legal > Privacy Choices. To exercise other rights, contact us at support@valovault.in. We will respond to your request within a reasonable timeframe.
6. Children's Privacy
Valo Vault does not target and is not intended for use by anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately so that we may take steps to remove that information from our servers.
7. External Links
The Services may contain links to websites or services that we do not operate, such as YouTube trailers or external news articles. Review the privacy policy of any external service you visit; we are not responsible for its content or privacy practices.
8. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes. Continued use of the App following the posting of changes constitutes your acceptance of such changes.
9. Grievance Officer and Contact
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data practices, please contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the rules made under it:
Name: Milan Jindal
Email: support@valovault.in
We aim to acknowledge complaints within 24 hours and resolve them within 15 days.