PRIVACY POLICY

Effective Date: September 23, 2026

CertiVault is a mobile application provided by Combat Gear Solutions LLC (“Combat Gear Solutions,” “we,” “us,” or “our”). This Privacy Policy explains how information is collected, used, processed, shared, retained, and deleted when you use CertiVault and related support services.

If you have questions about this Privacy Policy or how your information is handled, contact us at jose@combatgearsolutions.com.

1. INFORMATION WE COLLECT

Account Information

When you create a CertiVault account, information associated with your account may include your email address and a unique account identifier used to authenticate you and associate your CertiVault data with your account.

Authentication is provided using Supabase. Authentication credentials are handled through the authentication service rather than being stored by CertiVault as readable passwords.

Credential and License Information

CertiVault allows you to enter and manage information about professional credentials, licenses, certifications, and similar records.

Depending on what you choose to enter, this information may include:

- Credential, license, or certification name

- License or credential number

- Issuing authority

- Expiration date

- Status information

- Notes

- Related document links

- Credential-related images or photos that you choose to upload

You control the credential information that you add to CertiVault.

Purchase and Subscription Information

CertiVault may offer optional paid Pro access through Google Play.

We may process information necessary to determine and maintain your purchase or subscription entitlement, including:

- Product or plan purchased

- Subscription or purchase status

- Renewal or expiration information

- Purchase or transaction reference identifiers

- Entitlement status

Purchase and subscription processing is handled through Google Play and RevenueCat.

Combat Gear Solutions does not receive or store your complete payment card number through CertiVault.

Support Communications

If you contact us for support, we may receive the information you voluntarily provide, such as your email address, the content of your message, and information necessary to investigate or respond to your request.

Operational and Security Information

CertiVault and its service providers may process limited technical, operational, and security information when necessary to provide the service, authenticate requests, diagnose problems, prevent abuse, and maintain the reliability and security of the application.

2. HOW WE USE INFORMATION

We use information collected through CertiVault to:

- Create, authenticate, and maintain user accounts

- Store and display the credentials and licenses you choose to manage

- Provide credential-management features

- Determine Free or Pro access

- Process and synchronize purchase and subscription entitlements

- Provide customer support

- Maintain application security and prevent unauthorized access or abuse

- Diagnose technical problems and maintain service reliability

- Process account and data deletion requests

- Meet applicable legal and regulatory obligations

We do not use the credential information you store in CertiVault for advertising.

We do not sell or rent your personal information.

3. SERVICE PROVIDERS AND DATA SHARING

We use service providers to operate specific parts of CertiVault.

Supabase

Supabase provides services used for account authentication, database functionality, and storage of CertiVault data.

Information processed through Supabase may include account information, credential information, and credential-related files or images that you choose to store.

RevenueCat

RevenueCat is used to help manage and verify CertiVault purchase and subscription entitlements.

RevenueCat may process identifiers and purchase or subscription information necessary to determine whether an account has access to paid features.

Google Play

Purchases and subscriptions made through the Android version of CertiVault are processed through Google Play.

Google may process payment and transaction information according to Google’s own terms and privacy policies.

We may also disclose information if required by law, legal process, or a valid governmental request, or when reasonably necessary to protect the rights, safety, security, or integrity of CertiVault, Combat Gear Solutions, or our users.

We do not provide users’ credential records to third parties for advertising or marketing purposes.

4. DATA STORAGE AND SECURITY

We take measures designed to restrict unauthorized access to CertiVault user data.

Credential operations are associated with the authenticated user’s account. Credential-related storage is private, and access to protected credential information and stored images is controlled through authenticated server-side processes.

Access controls are designed to prevent one CertiVault user from accessing another user’s credential information.

No method of electronic storage, transmission, or security is completely secure, and we cannot guarantee absolute security.

5. YOUR CHOICES AND CONTROL

You can create, edit, and delete individual credential records through CertiVault.

You may also remove credential-related images or other information you previously added where the applicable CertiVault feature provides that option.

You may request deletion of your entire CertiVault account and associated data.

6. ACCOUNT DELETION

CertiVault provides an account-deletion option within the application.

You may also find account-deletion instructions and request assistance through our Delete Account page.

When an account-deletion request is initiated through CertiVault, the account enters a 30-day deletion period. During this period, the deletion request may be canceled from within CertiVault.

If the deletion request is not canceled, the account and associated CertiVault user data are scheduled for permanent deletion.

Deleting your CertiVault account does not automatically cancel an active Google Play subscription. Google Play subscriptions are managed through the user’s Google Play account and should be canceled separately if the user no longer wishes to be charged.

Certain limited records may be retained when reasonably necessary for legal obligations, security, fraud prevention, dispute resolution, or purchase and entitlement integrity. We limit retained information to what is reasonably necessary for those purposes.

Information maintained independently by Google Play, RevenueCat, or another service provider may also be subject to that provider’s own retention requirements and privacy policies.

7. DATA RETENTION

We generally retain account and credential information for as long as your CertiVault account remains active or until you delete the applicable information.

Individual credential records that you delete are removed from CertiVault’s active data systems along with associated stored credential images where applicable.

When an account reaches the end of the account-deletion process, associated CertiVault user data is deleted except for limited information that may need to be retained for legitimate legal, security, fraud-prevention, transaction-integrity, or similar purposes.

Support communications may be retained for a reasonable period when necessary to respond to requests, maintain support history, resolve disputes, or protect the security of the service.

Third-party service providers may retain information according to their own legal obligations and privacy policies.

8. CHILDREN’S PRIVACY

CertiVault is intended for the management of professional credentials and is not designed or directed toward children.

We do not knowingly use CertiVault to solicit personal information from children.

If you believe a child has provided personal information through CertiVault, contact us at jose@combatgearsolutions.com.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy as CertiVault changes or as legal, regulatory, or operational requirements change.

When this policy is updated, we will revise the Effective Date shown at the top of this page.

Material changes may also be communicated through CertiVault or through another appropriate notice when required.

10. CONTACT US

For privacy questions, account-deletion assistance, or other questions regarding your information, contact:

Combat Gear Solutions LLC

CertiVault