Privacy policy
Last updated November 3, 2026
better-vault is open-source software that runs on your own device: in your browser, or as a desktop app on your computer. This policy explains what data it handles and where that data goes. The short version: your notebooks stay with you, and we, the project, never receive them.
Who we are
better-vault is an MIT-licensed open-source project maintained by Khalid Abdi and its contributors. Its source code is public at github.com/better-vault/better-vault, so you can check everything this policy says.
What we collect
Nothing. better-vault has no accounts and no server database. We do not collect, store, sell or share your notebooks, sources, chats, files, API keys, Google account information or usage data. The app contains no analytics or tracking, and neither does this website.
Data on your device
Your notebooks, sources, chats, Studio outputs, settings and API keys are stored on your device: in your browser's storage (IndexedDB) for the web app, or in a file in the app's data folder for the desktop app. You can export them as a backup, and delete them at any time in Settings → Data.
Services you choose to use
better-vault only sends data to the services you set up yourself, and only what a request needs:
- AI providers (such as OpenAI, Anthropic, Google, OpenCode, ElevenLabs, or Ollama and LM Studio on your own machine) receive your question, the relevant passages of your sources and your key, and return the answer. Their own privacy policies apply.
- Storage services (Google Drive, Amazon S3, Cloudflare R2) receive the files you choose to save there, such as backups and exports, and send back the files you choose to open.
- Web pages you add as sources are fetched to read their text.
These requests pass through the app's own API, which runs on your computer in the desktop app, or on the server that hosts the web app. It forwards each request and keeps nothing; keys and content are never logged.
Google user data
When you connect Google Drive, better-vault asks for one permission: access to the files you pick in Google's file picker and the files better-vault creates (the drive.file scope). It cannot see the rest of your Drive. Google also shares your name and email address so the app can show which account is connected.
better-vault uses this access only to do what you ask: read the files you pick so they can become sources in a notebook, and save the backups and exports you choose into a "better-vault" folder in your Drive. The files' contents are stored only on your device, as part of your notebooks.
Google user data is never transferred to us or to anyone else, never used for advertising, never sold, never used to train AI models, and never read by people. The only exception is the part of a file you choose to use as a source in a chat or Studio request, which goes to the AI provider you picked for that request.
better-vault's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The access token that Google issues stays on your device: in your browser's memory for the web app, or in a file only you can read in the desktop app's data folder. Disconnect Google Drive in Settings → Storage to sign out and revoke the access, or remove it at any time at myaccount.google.com/connections.
Updates
The desktop app checks GitHub for new versions. GitHub receives a standard web request (your IP address and the app's version) and its own privacy policy applies.
Children
better-vault is not directed at children under 13 and collects no personal information from anyone.
Changes and contact
When this policy changes, the date above changes with it, and the history is public in the repository. For questions, open an issue at github.com/better-vault/better-vault/issues.