Privacy Policy

Product: Monolith Spark (com.vlemon.monolith.spark) · Publisher: Vlemon LLP · Contact: privacy@vlemon.com

This Privacy Policy describes how Monolith Spark ("Spark," "the App") handles information. Spark is the free edition of Monolith. Your credential vault is encrypted and stored on your device. Spark displays ads using Google Mobile Ads (AdMob) and therefore uses the network for advertising. Spark is not an air-gapped product.

Related: Ads & Tracking Notice · Data Export & Deletion

1. Who we are

Vlemon LLP ("we," "us") publishes Monolith Spark on the Apple App Store and Google Play (and optionally other stores). Website: vlemon.org.

2. Summary

3. Information stored on your device

Spark stores locally (not on our servers): encrypted credentials (same vault model as Monolith Vault, including optional TOTP/authenticator secrets); PIN/key material in platform secure storage; biometrics, theme, and idle-lock preferences; and import/export history metadata (no passwords or backup passphrases).

Reset all data in Settings wipes local vault data, history, and unlock credentials.

4. Advertising and third-party data collection (Google Mobile Ads)

Spark shows banner and interstitial ads. To do so it integrates Google Mobile Ads (AdMob).

Google — not Vlemon LLP — may collect and process information such as advertising ID / identifier for advertisers (subject to OS settings), IP address and device information, approximate location derived from IP (depending on Google configuration and region), and ad interaction and performance data.

How Google uses this data is governed by the Google Privacy Policy and Google Advertising / AdMob policies.

We do not send your vault passwords, usernames, notes, backup passphrases, or PIN to Google or to our servers for ads. Ads are not shown on lock/PIN entry, credential edit screens, or while you enter backup passphrases.

Full detail on ad technology, App Tracking Transparency, and how to reduce ads is on our dedicated Ads & Tracking Notice.

5. Store links and "Get Monolith Vault"

Spark may open Apple App Store, Google Play, or Microsoft Store pages so you can buy Monolith Vault. Opening a store uses the network and is subject to Apple's, Google's, or Microsoft's privacy policies.

6. Backups you create

Exports are password-protected .monolith.vdoc files created on device. We do not receive them unless you transmit them yourself. Import works with .monolith.vdoc, .vault.vdoc, and legacy .monolith files. Full export/import/migration steps are on our Data Export & Deletion page.

7. Permissions

Spark may request: Camera (offline QR scanning for credentials), Biometrics (optional unlock), Network (advertising and opening store URLs), and File / share access (encrypted backups).

8. Legal bases (EEA/UK where applicable)

Where GDPR/UK GDPR applies, processing of on-device vault data is based on contract / your request to provide the App. Advertising-related processing by Google may rely on consent and/or legitimate interests as described in Google's documentation and your OS consent flows. See our company-wide GDPR Compliance page for data subject rights.

9. Children's privacy

Spark is not directed at children under 13 (or higher age required in your region). We do not knowingly collect children's data. Spark is intended for a general/adult productivity audience.

10. Data retention

On-device data is retained until you reset or uninstall. Ad data is retained by Google under their policies. We do not retain Spark vault contents on our servers.

11. Security

Vault contents are encrypted at rest on supported mobile platforms (SQLCipher). Backup files use passphrase-based encryption. No system is perfect; protect your device PIN/biometrics and backup passphrases.

12. Changes & contact

We may update this policy; the effective date will change.

Privacy: privacy@vlemon.com · Support: support@vlemon.com · Web: vlemon.org