Privacy
Last updated November 14, 2026
VaultMe is a private home for unreleased music. Your songs are yours: we keep them so you can play and share them, and for nothing else. We don’t sell anything about you, we don’t show ads, and we don’t use your music to train anything.
Who we are
VaultMe is made by Vahdat Web (Arian Vahdat). If you have a question about this page or your data, write to support@vaultme.me. See also our terms.
What we keep about you
- Your account: your name, your artist name if you add one, your email address, your password (stored only as a scrambled hash we can’t read back), and the date you last used VaultMe.
- Your music: one compressed copy of every version you keep (the file you upload is deleted as soon as that copy is made), with its name, notes and waveform. Project names and covers.
- Your share links: what each one is for, its settings (password, downloads), and when it was made or revoked.
- Signing in: a cookie that keeps you signed in (for 30 days if you ask us to remember you, and always in the iPhone app, counted from the last time you open it). Signing in with Apple in a browser adds a second one for the trip to Apple and back, gone within ten minutes. Neither is used for tracking.
- Sign in with Apple: if you use it, the ID Apple gives us for you, the email Apple shares (your own, or a private relay address if you chose to hide it), and a token from Apple we only use to unlink VaultMe from your Apple ID when you delete your account.
- Notifications: if you turn them on, the address your phone or browser gives us for sending them, and a label like “iPhone · Home Screen app”.
- On your iPhone: the app keeps your songs, covers and their names on the phone, so they play with no connection and Siri can find them by name (iOS on your phone learns the names of your songs and projects for that). Files you’re uploading wait on the phone until they’re sent. If you turn on the Face ID lock, iOS checks it’s you: we never see your face or fingerprint. Export cover can save a project’s cover to your photos; VaultMe can only add it there, never look at your photos.
People you share with
Someone who opens one of your links doesn’t need an account. So you can see who listened, we keep, for each visit: when it was, the kind of device (“iPhone”, “Mac”), which songs were played and how far. We don’t keep their IP address: only a scrambled version of it that can’t be turned back into the address. A link with a password stays locked until it’s typed in; nothing about the music shows before that.
If you open someone’s link while signed in to VaultMe, or save it to your Library, the artist who made the link sees your name (your artist name if you have one) next to that visit and in a “Saved by” list. A saved link stays in your Library only while it works: when the artist revokes or deletes it, it’s gone.
These listens are shown only to the artist who made the link. They’re deleted with the link, the song, or the artist’s account.
What we don’t do
- No ads, no advertising cookies, no analytics or tracking scripts.
- We don’t sell or rent your data, or your listeners’ data, to anyone.
- We don’t listen to, publish or train anything on your music. Files have random names in storage; only you, and the people you share links with, can play them.
Who helps us run it
A few companies handle parts of the service for us, and only see what they need to do that:
- Cloudflare stores your music files in private storage (R2), and passes the site’s traffic through its network, which protects it from attacks.
- Vultr rents us the server the app runs on, where the database and covers are kept.
- Brevo sends our emails (confirming your address, resetting your password).
- Apple, Google or Mozilla deliver notifications to your device if you turn them on. In a browser, what we send them is encrypted so only your device can read it; the iPhone app’s notifications go through Apple’s own service, which sees the notification’s text.
- Apple also checks who you are if you choose Sign in with Apple.
We only share information beyond these if the law makes us, for example a valid court order.
How long we keep things
- Everything stays while your account exists, until you delete it.
- When you delete a song, a version or a project, its files are removed from storage within minutes.
- When you delete your account, all of it goes: your music, covers, links, listens and devices.
- Nightly backups of the database and covers are kept for three days, on the server and in a copy away from it (in case the server is lost), so deleted things leave those within three days. If no newer backup can be made, the last one stays until one is.
- Scrambled IP addresses used to stop abuse (too many password tries, for example) are cleared after two days.
Your choices
- Change your name, artist name, email or password, and turn notifications off, in Account.
- Revoke or delete any share link at any time; it stops working at once.
- Delete your account in Account → Delete account. It happens straight away.
- Want a copy of what we hold about you, or have it corrected? Email support@vaultme.me.
Keeping it safe
Everything travels over encrypted connections. Music is stored privately and only ever played through addresses that expire after a few minutes, made for each play after checking you’re allowed to hear it. Passwords are hashed, and share-link passwords and sign-in tries are limited to stop guessing.
Children
VaultMe isn’t meant for anyone under 13, and we don’t knowingly keep data about them. If you think a child has signed up, tell us and we’ll delete the account.
Changes
If we change how we handle your data, we’ll update this page and the date at the top. For a big change, we’ll tell you by email first.