The App Store description is two lines from the first version:
Secure storage for 2FA codes and secret notes.
Backup to a PDF document which you can print or save to your online storage.
It says nothing about any of these:
- App Lock and the App Lock Password;
- duress passwords, hidden items, killphrases and erasing after 10;
- recovery phrases;
- AutoFill, widgets and Spotlight;
- automatic backups and device transfer;
- the clipboard and keyboard protections;
- that there are no servers, accounts or analytics.
The new screenshots (VAULT-92) show the duress features, so the text should explain them.
The promotional text ("Backup to paper which you can print or save to an online drive…") is also out of date.
The privacy policy URL is https://badbundle.com/privacy. That page covers only the website, and links to Vault's own policy at /apps/vault/privacy/. App Store Connect wants the app's policy.
Change
description.txt: a short opening that works above the fold, then sections:
- 2FA codes;
- notes and recovery phrases;
- when you're made to unlock it;
- backups you control;
- private by design.
- Every claim matches
docs/security-model.md, with its limits ("from this vault", "if you turn it on", "by default"). No other app is named.
promotional_text.txt: at most 170 characters, as the listing's one-line pitch.privacy_url.txt: https://badbundle.com/apps/vault/privacy/.
Done when
The description (at most 4,000 characters) and promotional text describe the app as it is, every claim is backed by a G row, the privacy URL points to Vault's policy, and fastlane lanes still passes.
