BaseVault
← Back to BaseVault

Privacy Policy

Last updated: July 27, 2026

BaseVault (“the app”, “we”, “us”) is published by AppHub Tech Inc. It’s a companion app for Clash of Clans: a daily feed of meta bases and armies, and a private, code-gated Vault your clan shares. This policy explains, plainly, what information the app handles and what it doesn’t.

The short version

No accounts. We don’t ask you to sign up, we don’t ask who you are, and we don’t build a profile of you ourselves or sell your data. The free version is supported by ads served through third-party ad networks, which collect some data — such as a device advertising identifier — to show and measure those ads. BaseVault Pro removes every ad, and with no ads served, that ad-network data collection stops. Full details are under “Advertising” below.

Two of our own features talk to our servers, because they have to: the daily feed is content you download, and the Vault is a shared library your clan stores through us. Both are described below.

No accounts, no identity

BaseVault has no login, no email, no phone number, no social sign-in. We never ask who you are. The Vault works through short access codes instead of accounts (see below). Your favorites, filters, language, and appearance settings live on your device.

The daily feed

To show you fresh bases and armies, the app downloads content from our servers — like loading images on any website. These are ordinary content requests; we send no personal data with them, and they aren’t tied to an account because there isn’t one. Our hosting provider (Cloudflare) may process standard request data such as IP address transiently to deliver content and protect the service from abuse. We don’t use it to identify or track you, and we don’t build profiles from it.

The Vault

The Vault is a private library your clan shares. You choose everything that goes into it. When you create or use a Vault, the following is stored on our servers so that everyone with the code can see the same set:

Access is gated entirely by the code: anyone with the member code can view and add; the manage code (held by leaders) can edit, reorder, delete any upload, rotate the codes, and delete the whole Vault. Joining a Vault is something you do deliberately, by entering a code your leader shared in clan chat.

Notifications (optional)

If you turn on notifications, the app registers a device push token so we can send alerts about your Vault — for example, when codes are rotated. Delivery uses Google Firebase Cloud Messaging — on iOS it is routed to Apple’s push service, and on Android it is delivered by Google directly. It is the only Firebase product we include; we do not include Firebase Analytics. Notifications are opt-in and per-category. Turn them off any time in the app or in your device’s system settings, and the token is removed.

Purchases (BaseVault Pro)

BaseVault Pro is sold through your app store — Apple’s App Store (StoreKit) on iOS and Google Play (Play Billing) on Android. We never see or store your payment details — the app store handles the transaction. Whether you have Pro is determined on your device from your app-store purchase; nothing about your purchase is sent to us.

AI reports (optional, paid)

BaseVault can generate an AI analysis of a base or an army — and, if you give a player tag, a personalised upgrade path. This is entirely optional: the app works fully without ever using it, and you can read a complete sample report for free, offline, without buying anything.

When you ask for a report, we send only what that report needs to our backend and on to an AI provider:

The AI provider is currently Anthropic; we may change provider, and this policy names whoever is in use. They process the request on our behalf, under commercial API terms that do not permit training on what we send.

Images are analysed and then discarded. We do not keep the picture you sent. We keep a content hash of it — a short fingerprint that can’t be turned back into the image — so that asking for the same report twice doesn’t charge you twice, plus the generated report itself so you can re-read it in the app.

Credits and reports are tied to an anonymous identifier the app generates on your device the first time it needs one — a random value, stored in your device’s secure keychain. It isn’t your Apple or Google account, it isn’t an advertising identifier, and it tells us nothing about who you are. It exists so that the credits you paid for come back to the right device, and so a report you already bought can be re-opened without being charged again.

Credits are bought through your app store, so again we never see your payment details. Unlike Pro, a credit purchase is sent to us — the store’s signed receipt, so we know which anonymous device to add the credits to. If you ask Apple or Google for a refund on credits, they may ask us how much of that purchase you had already used, and we will answer with that usage figure so they can decide. That is the only purpose we use it for.

Advertising (free version)

The free version of BaseVault is supported by ads. We serve them through Google AdMob, with Unity Ads and Pangle as additional networks through AdMob’s mediation. These third parties — not us — collect data through their SDKs to select, cap, and measure ads. Depending on your choices below, that can include a device advertising identifier (the IDFA on iOS or the Advertising ID on Android), advertising and usage data, coarse (city-level) location, and diagnostic data, and they may use it for advertising, including personalized ads.

Your choice. On iOS, the app asks on first launch, through Apple’s standard App Tracking Transparency prompt, whether these networks may track you across other companies’ apps and websites; if you decline, you’ll still see ads, but non-personalized ones, and you can change it any time in iOS Settings → Privacy & Security → Tracking. On Android, you control this in Settings → Privacy → Ads, where you can delete your Advertising ID or opt out of ad personalization. In the EEA and UK, a separate consent step (Google’s User Messaging Platform) governs personalized advertising on both platforms.

Removing ads. BaseVault Pro turns off every ad surface. With no ad requested, the ad networks’ SDKs aren’t asked to load or collect ad data.

Each network processes the data it collects under its own policy: Google / AdMob, Unity Ads, and Pangle.

What stays on your device

Service providers

We rely on a small number of providers to operate the app:

Retention and deletion

For step-by-step instructions, see the Delete Your Data page.

Children’s privacy

BaseVault is not directed to children under 13. Because the free version shows ads, we don’t knowingly direct it at, or knowingly collect personal information from, children.

Changes to this policy

If this policy changes, we’ll update the date above and post the new version at this URL.

Contact

Questions about your privacy or this policy? Email [email protected].

Not affiliated with, endorsed, sponsored, or specifically approved by Supercell. Clash of Clans is a trademark of Supercell.