Norivault Privacy Notice

1. Scope and privacy at a glance

This notice is provided by Meritwright LLC, a Texas limited liability company. It covers the Norivault Windows edition, which is available through the Microsoft Store, and the planned macOS edition. A separate Norivault Mobile product is in Google Play certification and pending release for Android; its edition for iPhone and iPad remains in development for the Apple App Store. Neither mobile edition is publicly available yet. It is not covered by this notice and has its own product-specific privacy notice. This notice describes the Windows edition's current data practices and the planned desktop local-data design for macOS. We will update it if relevant practices change.

This notice is specific to Norivault. The corporate Privacy Policy covers Meritwright.com and company email, not the operation of every Meritwright product.

2. Information you choose to enter

Your workspace may contain a service profile and history, dates, conditions, symptoms, notes, planning calculations, checklist responses, evidence-readiness information, and reference reports. Files you select may include medical records, service records, supporting statements, and other sensitive personal or benefits-related documents. Associated file names and descriptions are also processed locally.

Adding medical information or evidence is optional. You can use research and planning tools without importing evidence. Selecting a file imports it into the local workspace; it is not an upload to Meritwright or VA. Only enter information you are entitled to use, including information about other people.

The app also keeps local preferences and operating information needed to remember your settings, protect access, and resume work, such as display preferences and failed-unlock attempt information.

3. How local processing works

Norivault uses the information in your workspace to organize records, connect evidence to conditions, provide local searches and planning tools, and create reports you request. Protected workspace records and evidence are encrypted locally. Your passphrase controls vault access; data is readable within the app while you unlock and use it.

Meritwright does not receive your workspace records through ordinary app use. Norivault does not send automated usage analytics, crash reports, or record scans to Meritwright. Meritwright does not sell personal information or share it for targeted advertising. Local preferences and access protections are not advertising trackers.

No separate Meritwright activation account or license server is required for storefront purchases. Your Microsoft or Apple account is separate from your local vault and is used for the applicable store's services.

4. What may leave the device

• Files you export, print, or share. Reports, extracted evidence, PDFs, screenshots, and other exports are outside the vault's protection. A printer, another application, or a recipient may process them when you choose to use those services.
• Backup and storage destinations. An encrypted Norivault backup package is a separate file saved to the destination you choose. If you save it to a cloud-synced folder, such as one managed by Microsoft OneDrive, Google Drive, or Dropbox, that provider may upload it automatically under your settings. You may also upload the package yourself. Norivault does not initiate or control the provider's cloud transfer.
• External links. When you choose a reference or support link, your browser contacts the destination. The destination may receive your IP address and browser information under its policies. Norivault's reference links do not append your claim or health information to their addresses.
• Stores and device services. Microsoft, Apple, your operating system, security software, or other software you independently use may process connection, device, or diagnostic information under their own settings and policies.
• Support messages. Meritwright receives information you deliberately include in an email. This is separate from automatic access to your vault.

Licensing and app updates may require the store or operating system to exchange account, app-version, device, and connection information with Microsoft or Apple. These services do not require your vault records or evidence. Norivault does not include automatic crash-report submission to Meritwright; operating-system or store diagnostics are governed by your device settings and the provider's privacy policy. If you choose to send a diagnostic report for support, review it and remove sensitive information first.

Visiting this notice or another Meritwright.com page uses the website's hosting and measurement services described in the corporate Privacy Policy. Those website services are not built-in analytics for the Norivault workspace.

5. Backups and recovery

You create encrypted backup packages and choose where to save them. The active workspace remains local, and exporting a backup package does not upload it by itself. A cloud service may upload the separate package automatically if you save it in a synchronized folder under your settings, or you may upload it manually. Norivault and Meritwright do not initiate or control that provider's transfer, synchronization, access, retention, or deletion practices. Those activities are governed by the provider's settings and policies.

Keep the passphrase used for a backup and verify the backup before relying on it. Earlier backup copies remain protected by their original passphrase; changing your current vault passphrase does not update files already saved elsewhere. An encrypted backup stored with a third party remains outside Meritwright's control and must be protected and managed through that service.

Meritwright does not keep a recovery copy of your vault or passphrase and cannot recover a forgotten vault passphrase. Reinstalling the app through a store does not restore your workspace; restoring your records requires your own compatible backup and its passphrase. Restoring a backup can replace local data, so review the app's confirmation before proceeding.

6. Retention and deletion

Local workspace data remains until you delete it, erase the local vault or application data, or it is removed by your device or app profile. Use the app's erase controls when you intend to remove the local vault. Do not rely on uninstalling alone: data retention after uninstall can depend on the edition, installation method, and options selected.

Deleting a record or erasing the vault does not remove the original file you imported, earlier backups, exported reports, printed copies, or copies held by another service or recipient. Remove those separately if needed. Deletion is not a guarantee of forensic erasure from a drive, system backup, or previously created copy.

Local deletion does not erase store purchase history or support correspondence. Microsoft and Apple manage their own records under their policies.

7. Marketplace and payment handling

The Microsoft Store manages purchases for Windows. When the planned macOS edition launches, the Mac App Store will manage its purchases. Account use, installation, restoration, refunds, compatible-device availability, and updates follow the purchasing store's policies. The store or operating system may connect to purchase, restore, or refresh your right to use the app.

Norivault never sends vault, evidence, health, medical, passphrase, report, backup, claim, or workspace content through Store licensing. Store account and transaction information is kept separate from the protected workspace and its backups. Meritwright does not collect payments on this website or receive your full payment-card details through the app.

Microsoft and Apple independently handle store account, payment, transaction, device, and licensing information. Store-provided sales or app-performance reporting is separate from vault content. See the Microsoft Privacy Statement and Apple App Store privacy information.

The Windows edition is available through the U.S. Microsoft Store; macOS availability remains planned. Store-region eligibility is not continuous location tracking by Norivault; the app does not use precise location or IP-location checks to enforce it.

8. Support and privacy requests

For product help, use Norivault Support or email support@meritwright.com. Provide the app version, operating-system version, store used, and a description of the problem. Do not email vault files, backups, passphrases, medical records, service records, claim files, government identifiers, store passwords, or payment-card details. Remove personal information from any screenshot you choose to send.

If you contact us, we receive your address and the information in your message. Microsoft 365 handles company email. We use correspondence to respond, troubleshoot, address security concerns, and meet applicable legal obligations, retaining it only as reasonably needed for those purposes. Service providers may process that correspondence on our behalf; disclosures may also be required by law. The corporate Privacy Policy explains this handling in more detail.

Privacy requests may be sent to privacy@meritwright.com. Applicable rights depend on your circumstances and the law. We can address information held by Meritwright, but cannot remotely access, correct, or delete a local vault we do not possess. We may need to verify a request without asking for your vault or passphrase.

9. Security and intended use

Local encryption and access controls reduce risk but cannot guarantee protection from every loss, device compromise, or unauthorized disclosure. Protect your device and passphrase, keep software current, and maintain verified backups. Local processing and encryption do not by themselves establish compliance with a regulatory framework.

Norivault is intended for adults managing veteran or service-member information and is not directed to children. It is independent software for self-help, research, and organization. It is not VA, a law firm, a medical provider, or a claims representative. It does not submit claims or evidence to VA, give legal or medical advice, or guarantee approval or a rating. VA alone makes official benefit and disability-rating determinations.

10. Changes and contact

We will update this notice when relevant practices change and identify the revision through the date above. The planned macOS edition and final store disclosures will be reviewed before release; this notice does not imply that a planned edition is already available.

Return to Norivault