Your credentials remain yours.

CredentialVault handles account information such as your name, email address, durable FireForge identity, sign-in sessions, and device registration information used to secure access.

You may add credential details, license or certification numbers, issue and expiration dates, continuing-education records, and source documents such as images or PDFs. Those records may contain sensitive personal information, so you should upload only documents you intend to keep in your vault.

When you subscribe through Apple, FireForge receives verified subscription and transaction identifiers needed to maintain your entitlement. CredentialVault does not receive your full payment-card number from Apple.

Information is used to operate and secure the Personal vault, synchronize iPhone and web access, read documents at your request, track renewal and continuing-education dates, create portable exports, provide support, prevent abuse, and maintain subscription access.

When production cloud document reading is enabled and you choose to read a document, CredentialVault sends an encrypted working copy to Amazon Textract in the configured AWS region. The copy is used to return OCR suggestions; it does not become an organization document. FireForge requires confirmation that the AWS AI-services improvement opt-out is active before this provider can be enabled. Local Apple Vision reading does not send the image to Amazon.

CredentialVault does not use Personal vault contents for advertising, does not sell Personal information, and does not track you across apps or websites owned by other companies.

Your Personal vault is independent by default. Joining an employer, agency, or department does not transfer ownership of your credentials or source documents.

An organization receives only the credential fields you explicitly share. Organization reviewers may retain their decision, disclosed-field snapshot, notes, and audit history when legally or operationally required. Private source documents do not become organization records unless you separately submit them through an organization-controlled intake workflow.

Leaving an organization ends its active access to your shared credentials. Your Personal copies remain in your vault, while the organization may retain its own legally required issuance, review, and audit records.

CredentialVault may use infrastructure, storage, email, security, and Apple subscription services to operate the product. Providers receive only the information needed for their role and must protect it under their applicable agreements.

Information may also be preserved or disclosed when reasonably necessary to comply with law, enforce rights, protect users, investigate security events, or honor a valid retention requirement. CredentialVault does not give an organization new access to your Personal documents merely because it places a retention hold.

You can generate a portable export from CredentialVault and can schedule deletion of your Personal account in the iPhone app or on the web. The app explains the cooling-off period and any person-visible retention hold before deletion completes.

Deletion removes or de-identifies Personal data that FireForge is not legally required to retain. Organization-owned audit, issuance, acceptance, rejection, and legal records may remain under the organization's retention obligations. Deleting CredentialVault does not automatically cancel an Apple subscription; manage Apple billing in Apple Subscriptions.

CredentialVault uses authenticated sessions, device-protected Keychain storage on iPhone, authorization checks, tenant boundaries, and audit records. No system can guarantee absolute security, so protect your password and report suspected unauthorized access promptly.

You can correct OCR suggestions before creating a credential, change notification choices, revoke active shares, leave organizations, export your data, and request account deletion. Questions or privacy requests can be sent through the CredentialVault support page.