AstraVault: Secure Doc Vault

AstraVault is the secure document vault built for India — protecting your passports, PAN card, bank documents, medical records, government IDs, and every sensitive file under AES-256-GCM encryption. 🔒 AES-256-GCM ENCRYPTION — ZERO SHORTCUTS Every file is encrypted in memory with AES-256-GCM before it ever touches storage. Your vault key is derived with PBKDF2-HMAC-SHA256 at 600,000 iterations — hardened against brute-force. Plaintext bytes are zeroed from RAM the moment encryption completes. Your data never leaves your control unencrypted. 📸 INTELLIGENT DOCUMENT SCANNER Capture documents from your camera or import from your gallery. OCR automatically extracts text in English and Hindi (Devanagari script) and sorts documents across 18 smart categories — Identity, Finance, Health, Travel, Legal, Education, and more. ☁️ ENCRYPTED GOOGLE DRIVE BACKUP Your encrypted files sync to your own private Google Drive — not our servers. Only your device holds the decryption keys. Lose your phone? Sign in with the same Google account on any new device, enter your passphrase, and your entire vault restores automatically. 👆 FINGERPRINT + PASSPHRASE PROTECTION Unlock with fingerprint biometrics via Android BiometricPrompt. Your vault passphrase is the cryptographic root — biometrics are a convenience gate only. Even AstraSoft cannot decrypt your data without your passphrase. 🔐 SENSITIVE ID AUTO-MASKING When OCR detects a 12-digit national ID pattern, the first 8 digits are automatically masked before any storage — protected by design, not just policy. No raw ID number is ever written to disk. 🔍 INSTANT ENCRYPTED SEARCH Full-text BM25 search across all your vault documents. Results appear in milliseconds — all processing stays on your device. Nothing is sent to any server. 🛡️ DEVICE INTEGRITY GUARD AstraVault detects rooted devices, emulators, debuggers, and APK tampering in real time. Any integrity violation triggers an automatic vault lockdown and local key purge. 🔒 AUTO-LOCKDOWN & PRIVACY MODE Enable auto-lockdown: the vault seals itself after 5 consecutive failed unlock attempts and requires your passphrase to reopen. Stealth Mode hides AstraVault from your recent apps list. Both are fully optional in Settings. 🚨 LOST DEVICE PROTECTION If your device is lost or stolen, your documents remain safe — the vault requires your passphrase (or hardware-bound biometric) to open, and your encrypted Drive copy is inaccessible without your key. Contact [email protected] to secure your account from any compromised device. ⚡ PRO TIER — ONE-TIME PURCHASE, NO SUBSCRIPTION Upgrade to Pro with a single payment. No recurring charges, ever. Both Standard and Pro users can watch optional 30-second ads for +5 bonus document slots per day. Your vault access is never gated or blocked by ads. WHAT WE DO NOT STORE ON OUR SERVERS: ✓ No raw document images — files are encrypted before any upload ✓ No biometric data — stored only in Android Keystore on your device ✓ No passphrases or encryption keys ✓ No document content — only you can decrypt and read your files AstraVault: Your vault. Your keys. Your privacy.