AstraVault: Secure Doc Vault

AstraVault is the secure document vault built for India — protecting your passports, PAN card, bank documents, medical records, government IDs, and every sensitive file under AES-256-GCM encryption.

🔒 AES-256-GCM ENCRYPTION — ZERO SHORTCUTS
Every file is encrypted in memory with AES-256-GCM before it ever touches storage. Your vault key is derived with PBKDF2-SHA512 at 600,000 iterations — hardened against brute-force. Plaintext bytes are zeroed from RAM the moment encryption completes. Your data never leaves your control unencrypted.

📸 INTELLIGENT DOCUMENT SCANNER
Capture documents from your camera or import from your gallery. OCR automatically extracts text in English and Hindi (Devanagari script) and sorts documents across 18 smart categories — Identity, Finance, Health, Travel, Legal, Education, and more.

☁️ ENCRYPTED GOOGLE DRIVE BACKUP
Your encrypted files sync to your own private Google Drive — not our servers. Only your device holds the decryption keys. Lose your phone? Sign in with the same Google account on any new device, enter your passphrase, and your entire vault restores automatically.

👆 FINGERPRINT + PASSPHRASE PROTECTION
Unlock with fingerprint biometrics via Android BiometricPrompt. Your vault passphrase is the cryptographic root — biometrics are a convenience gate only. Even AstraSoft cannot decrypt your data without your passphrase.

🔐 SENSITIVE ID AUTO-MASKING
When OCR detects a 12-digit national ID pattern, the first 8 digits are automatically masked before any storage — protected by design, not just policy. No raw ID number is ever written to disk.

🔍 INSTANT ENCRYPTED SEARCH
Full-text BM25 search across all your vault documents. Results appear in milliseconds — all processing stays on your device. Nothing is sent to any server.

🛡️ DEVICE INTEGRITY GUARD
AstraVault detects rooted devices, emulators, debuggers, and APK tampering in real time. Any integrity violation triggers an automatic vault lockdown and local key purge.

🔒 AUTO-LOCKDOWN & PRIVACY MODE
Enable auto-lockdown: the vault seals itself after 5 consecutive failed unlock attempts and requires your passphrase to reopen. Stealth Mode hides AstraVault from your recent apps list. Both are fully optional in Settings.

🚨 LOST DEVICE PROTECTION
If your device is lost or stolen, your documents remain safe — the vault requires your passphrase (or hardware-bound biometric) to open, and your encrypted Drive copy is inaccessible without your key. Contact [email protected] to secure your account from any compromised device.

⚡ PRO TIER — ONE-TIME PURCHASE, NO SUBSCRIPTION
Upgrade to Pro with a single payment. No recurring charges, ever. Both Standard and Pro users can watch optional 30-second ads for +5 bonus document slots per day. Your vault access is never gated or blocked by ads.

WHAT WE DO NOT STORE ON OUR SERVERS:
✓ No raw document images — files are encrypted before any upload
✓ No biometric data — stored only in Android Keystore on your device
✓ No passphrases or encryption keys
✓ No document content — only you can decrypt and read your files

AstraVault: Your vault. Your keys. Your privacy.