Legal

Privacy Policy

All Morhover Creation apps · Effective October 26, 2026 · Version 2.0

Streak Tasks VaultX PDF Maker 2FA AuthVault Svapn Goldmine ASCII Studio

In one breath

Your data stays on your device. We never sell it.

This one policy covers every app published by Morhover Creation. Each app has its own section below, so you can read exactly what applies to the app you use. New apps will be added here, so this link stays the same.

No account, no sign-up and no email needed to use our apps.
We never sell your data. Three apps (Streak Tasks, VaultX and PDF Maker & Enhancer) show ads; the other four have none.
Your content (photos, tasks, codes, documents) is stored on your device, not on our servers.
Purchases and subscriptions are processed entirely by Apple.
Where an app does send something off your device, its section says what, why and to whom.

1. About this policy

This Privacy Policy describes how the iPhone and iPad apps published by Urvik Moradiya, an independent iOS developer operating as Morhover Creation (referred to below as "we," "us," or "I"), handle information. The studio is based in India.

It covers these apps: Streak Tasks, VaultX, PDF Maker & Enhancer, 2FA AuthVault, Svapn, Goldmine and ASCII Studio, and any app we add later. Sections 3 to 7 and 15 to 21 apply to every app. Sections 8 to 14 describe each app's specifics, and where the two differ, the app-specific section controls.

This policy is written in plain English on purpose. If anything is unclear, email contact@morhover.com and I'll explain.

2. Apps at a glance

App	Account needed	Content leaves your device?	Permissions it may ask for
Streak Tasks	No	No	Notifications · shows ads
VaultX	No	Only if you choose Private Browser or Wireless Transfer	Camera, Photos, Face ID, Location, Motion · shows ads
PDF Maker & Enhancer	No	No	Camera, Photos, Files · shows ads
2FA AuthVault	No	No	Camera, Photos, Face ID
Svapn	See section	Dream text you submit to AI features	Notifications, Microphone
Goldmine	See section	Only to fetch live rates (none of your entries)	Notifications
ASCII Studio	No	No (processed on device)	Photos

3. Data we collect

Personal info we collect

None

Ads

3 apps only

Selling your data

Never

Profiling you

Never

Information you provide to us

Our apps do not ask you to create an account or give your name, email address, phone number or any other personal identifier. The only time we receive information from you is when you choose to email us.

Information collected automatically

Streak Tasks, VaultX and PDF Maker & Enhancer show advertising supplied by a third-party ad network (see section 7). Ad networks may collect device identifiers and basic usage and ad-interaction data to serve and measure ads, subject to the choices you make in iOS (for example the "Allow Apps to Request to Track" setting). Svapn, Goldmine, 2FA AuthVault and ASCII Studio contain no ads. We do not build a profile of you or sell your data.

What Apple may collect

When you download an app from the App Store, Apple may collect download statistics, crash reports and aggregate metrics through App Store Connect, independently of our apps. This is governed by Apple's Privacy Policy, and we do not receive personally identifying information from it.

4. Data stored on your device

Important: The content you create or import in our apps, such as tasks, photos, documents, authenticator secrets and journal entries, is stored on your device in the app's private sandbox. We do not run user-content servers, so we cannot see or recover it. Your device's own backups (for example iCloud or a Mac backup) may include app data according to your iOS settings; Apple manages those, not us.

Deleting an app from your device removes the data it stored, subject to the app-specific notes below.

5. Permissions our apps may ask for

Apps only ask for a permission when you use the feature that needs it, and every permission can be changed in iOS Settings → Privacy & Security or the app's own entry in Settings.

Camera: scanning QR codes (2FA AuthVault), scanning documents (PDF Maker & Enhancer), and capturing photos or video straight into your vault (VaultX). Camera feeds are processed on your device and not uploaded by us.
Photos: importing images you choose, and saving results you export. Apps only access the items you pick or the files you ask them to save.
Face ID / Touch ID: optional app locks. iOS checks your biometrics; our apps only receive a yes/no result and never your biometric data.
Location: only for VaultX's optional Location Lock, to check whether you are in a place you have chosen.
Motion: only for VaultX's optional Flip to Lock.
Notifications: reminders and alarms you set (Streak Tasks, Svapn, Goldmine).
Microphone: only if you choose to speak a dream entry in Svapn.
Files: only when you import or export a document you pick.

6. Subscriptions & in-app purchases

Some apps offer paid features, for example an optional Pro upgrade or subscription. See each app's App Store listing for current prices.

How payments are handled

All payments, renewals, refunds and cancellations are processed entirely by Apple through your Apple ID. We never receive or store your card or payment details, billing address, or full Apple ID details. Apple gives the app a purchase receipt, a cryptographic confirmation that a valid purchase was made, which the app uses to unlock the feature on your device.

Managing your subscription

Open Settings → tap your name → Subscriptions on your iPhone, or manage it in the App Store. Cancelling stops future charges; paid features remain until the end of the period you already paid for.

Refunds

Refunds are issued solely by Apple. Request one at reportaproblem.apple.com.

7. Third-party services

Streak Tasks, VaultX and PDF Maker & Enhancer include a third-party advertising SDK. Svapn, Goldmine, 2FA AuthVault and ASCII Studio include no advertising, attribution or tracking SDKs. The services our apps use are:

Apple's own frameworks (Keychain, Camera, Photos, LocalAuthentication, StoreKit, notifications), governed by Apple's privacy policy.
Advertising network (Streak Tasks, VaultX, PDF Maker & Enhancer only): receives device and ad-interaction data under its own privacy policy. You can limit ad personalisation in iOS Settings → Privacy & Security → Tracking and Apple Advertising.
App-specific services, such as the AI processing used by Svapn or live-rate lookup in Goldmine, named in that app's section.

If we add a new third-party service to any app, we will update this policy and disclose what data is shared, with whom and why, before that version ships.

8. Streak Tasks

Streak Tasks is a task, habit and streak tracker.

Stored on your device: your tasks, habits, streak history and preferences, including the data shown in the home-screen widget.
Leaves your device: none of your tasks or habits.
Ads: the app shows ads from a third-party ad network (section 7).
Permissions: notifications, only if you set reminders.
Deleting data: delete tasks inside the app, or delete the app to remove everything it stored.

9. VaultX

VaultX is a private vault for photos and videos, locked with a PIN and optional biometrics.

Stored on your device: the photos and videos you add, your albums and favorites, your settings, and your PIN-related security data. Everything stays on your iPhone.
Camera and Photos: used to capture or import media into the vault. Items you add are kept inside the app and hidden from your camera roll.
PIN, password and folder passwords: used only to unlock content on your device. We cannot recover a forgotten PIN or password for you.
Ads: the free app shows ads from a third-party ad network (section 7). Ads are never shown inside your vault content.
Unlock methods: you can lock VaultX with Face ID, a 6-digit PIN or a password. Face ID is handled by iOS (see section 5).
Location Lock and Flip to Lock: optional protections that use location or motion locally on your device. Location is not sent to us.
Private Browser: an optional built-in browser. It loads the sites you choose to visit, so those sites receive normal web requests from your device. The app does not keep history, cookies or cache, blocks trackers and ads, and upgrades connections to HTTPS. Anything you save from it goes into your vault.
Wireless Transfer: optional. When you switch it on, your vault is reachable from a browser on the same Wi-Fi network until you leave the screen or turn it off. Transfers happen directly between your devices and not through our servers.
Deleting data: delete items inside the app, or delete the app to remove the whole vault. Because we hold no copy, deleted items cannot be restored by us.

10. PDF Maker & Enhancer

PDF Maker & Enhancer scans, creates, merges, signs and compresses documents.

Stored on your device: the documents and signatures you create or import, and your settings.
Camera: used to scan documents. Processing, including edge detection and enhancement, happens on your device.
Photos and Files: used only for the images and files you choose to import, and to save or share results you export.
Leaves your device: nothing, unless you choose to share a document through the iOS share sheet, in which case it goes where you send it.
Ads: the app shows ads from a third-party ad network (section 7). Your documents are never shared with advertisers.
Deleting data: delete documents inside the app, or delete the app to remove what it stored.

11. 2FA AuthVault

Short version: your 2FA secrets stay on your phone. We never see them. The app needs no account, uses no analytics or tracking SDKs, and makes no network requests for its core features.

What is stored

Account names and labels you assign to each entry (for example "Gmail").
2FA secret keys (TOTP / HOTP) you add by scanning a QR code or typing manually, stored in the iOS Keychain, which is hardware-backed by the Secure Enclave.
Configuration values such as algorithm, digit count and refresh period, and preferences such as the Face ID lock setting, sort order and onboarding status.

Camera and Photos

The camera is used for one purpose only: scanning QR codes that contain 2FA setup information. The feed is processed on your device in real time; we do not record video, save photos, or send any frame over the network, and the camera is not used in the background. If you choose "Import from Photos", you select which image to decode; it is decoded on-device and not retained or uploaded.

Face ID / Touch ID

An optional setting asks for Face ID or Touch ID before the app opens. iOS performs the match locally through LocalAuthentication; the app receives only a yes/no result.

Network

Generating codes, adding, searching, copying and deleting accounts all work fully offline. The app may contact Apple only to validate in-app purchase receipts, and opens your browser when you tap the Privacy Policy or Terms links. No secrets, account names or personal data are ever sent over the network.

Deleting data

Swipe an entry to delete it, use Settings → "Delete All Accounts", or delete the app to remove every byte of its data from your device.

12. Svapn

Svapn is a dream journal, smart alarm and sleep companion with AI features.

Stored on your device: your dream entries, alarm settings, sleep statistics and preferences.
AI features: when you ask Svapn to visualise or analyse a dream, the text of that dream entry is sent to an AI processing service so it can return an image, video or analysis. Only entries you submit to those features are sent. Please do not enter information you do not want processed this way.
Notifications: used for the alarm and reminders you set.
Microphone: used only if you choose to speak a dream entry, and only while you are recording.
Feedback: if you send in-app feedback (for example the "How Dreamy was That" rating and note), the rating and the text you write are sent to us so we can improve the app.
Deleting data: delete entries inside the app, or delete the app to remove what it stored on your device. To ask us to delete anything we hold from AI processing or feedback, email us (see section 21).

13. Goldmine

Goldmine is a finance and gold-tracking manager.

Stored on your device: the income, expenses, budgets, categories and holdings you enter, and your preferences.
Network use: the app fetches live market and gold rates. These requests do not include your entries or personal details.
Notifications: used for reminders you choose to set.
Deleting data: delete entries inside the app, or delete the app to remove what it stored.

Goldmine is a tracking tool and does not provide financial, investment or tax advice.

14. ASCII Studio

Short version: your photos are processed on your device. No account is required, and the App Store privacy label states that no data is collected.

Photos: used to pick the photo you want to edit and to save the photo, video or GIF you export. You choose each item.
On-device processing: ASCII, effect and animation rendering all happen on your device. Autosave and history are kept locally.
Purchases: the optional Pro upgrade is handled by Apple (section 6).
Leaves your device: nothing, unless you share an export through the iOS share sheet.
Deleting data: remove projects inside the app, or delete the app to remove its local data. Exports you saved to your Photos library stay there until you delete them.

15. Security

Local-first design: your content stays on your device in the app's sandbox, isolated from other apps.
Hardware-backed protection through the iOS Keychain and Secure Enclave where an app stores secrets (for example 2FA AuthVault).
Optional locks such as PIN, folder passwords and Face ID / Touch ID, depending on the app.
Minimal servers: we operate no user-content database that could be breached.

No software is perfectly secure. To report a security issue, email contact@morhover.com. You can help by keeping iOS up to date, using a strong device passcode and not jailbreaking your device.

16. Children's privacy

Our apps are not directed at children under 13 (or under the minimum digital-consent age in your country, for example 16 in some EU member states). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact contact@morhover.com and we will investigate immediately.

17. Your rights

Privacy laws including the EU and UK GDPR, California CCPA / CPRA and India's Digital Personal Data Protection Act (DPDP) give you rights over your personal data, typically access, correction, deletion, portability, objection, and protection from solely automated decisions.

For almost all of our apps, we do not hold personal data on any system we control, so there is nothing for us to hand over, correct or delete. We do not sell data, profile you, or make automated decisions about you. Where an app does handle data on our side (for example Svapn feedback), you can request access or deletion by email, and we will respond within 30 days.

18. Deleting your data

Inside the app: delete individual items or use the app's reset or delete-all option where it has one.
Delete the app: long-press the icon on your Home Screen and choose "Delete App". This removes the app's local data from your device.
Ask us: for anything we hold (see each app's section), email us and we will delete it.

19. International users

Our apps are available globally on the Apple App Store. Because your content stays on your device, there are no international transfers of it to disclose. Where an app sends limited data to a service (for example Svapn's AI processing), that service may process it in other countries.

20. Changes to this policy

If we change how any app handles data, or add a new app, we will update this page, bump the "Last updated" date and version at the top, and for meaningful changes include an in-app notice in the affected update. Continued use of an app after changes are posted means you accept the updated policy; if you disagree, you can stop using the app and delete it.

21. Contact us

For privacy questions, data requests, security concerns, or anything else covered by this policy:

Urvik Moradiya
Morhover Creation (independent iOS developer)
Email: contact@morhover.com
Website: creation.morhover.com

If you live in the European Union and feel we have not adequately addressed a concern, you may lodge a complaint with your national Data Protection Authority. If you live in India, you may approach the Data Protection Board under the DPDP Act.

This Privacy Policy is provided in English. Where it is translated, the English version controls in case of discrepancy.

Questions? Just ask.

Privacy questions, data requests or security concerns — email and we'll explain.