Enter — $10 AUD / month Android only — no iPhone version exists

The problem

Your phone is a pocket archive of your life — photos, documents, contacts, conversations. If it is searched, seized, lost, or simply browsed over your shoulder, everything on it is exposed.

Locks and PINs protect a phone that is full. CzenVault takes a different approach: the strongest data on a phone is the data that isn't there.

How it works

Tag. Mark what is sensitive as it is created — a photo, a document, a contact, a message thread.
Sweep. One tap (or automatically, on a schedule) encrypts everything tagged with your passphrase and moves it to your private vault on our server. The originals are deleted from the phone.
Restore. Need something back — a source's contact, a document for a meeting? Restore it in seconds. Restoring removes it from the vault: your data lives in exactly one place at a time.

See it in action

Nuclear War 80's start screen
The decoy: a complete retro strategy game. No vault in sight.
Diplomacy terminal
The Diplomacy Terminal — queue strikes, defence, builds and propaganda.
Global monitor
The Global Monitor — every turn plays out live on the world map.
A strike landing
Cities burn. Population moves. The comedy of deterrence, intact.

All of this is the disguise. Behind the red pill waits the vault — passphrase-only, invisible to anyone holding your phone.

Behind the red pill

CzenVault vault hub
The vault hub — six rooms that only exist after your passphrase.
QR pairing screen
Contacts are paired in person, QR to QR. No contact uploads, ever.
File Marker screen
File Marker — tag sensitive files; they leave the phone on the next clean sweep.
Archive Control screen
Archive Control — scan, name, catalogue, delete or restore your collections anytime.
SCIF entry screen
The SCIF — a secure viewing room that connects straight to your vault.
SCIF item list
Items decrypt only inside the room — nothing is ever written to your device.

What's inside

Zero-knowledge vault

Argon2id + AES-256-GCM encryption, done on your phone. Your passphrase never leaves your hand. The server stores only ciphertext — we cannot read your vault, and we cannot recover it if you lose your passphrase. Not for anyone.

Encrypted messaging

Text and voice notes with people you pair with in person by QR code. Messages travel through anonymous mailboxes the server cannot link to anyone — no accounts, no contact uploads, no logs. You choose what burns and what remains.

SCIF viewing

Look inside your vault without restoring anything. Items are decrypted for your eyes only, in a screenshot-proof room that wipes itself the moment you leave. No trace, no copy, no memory.

Scheduled sweeps

Set it and forget it — the vault sweeps tagged items automatically every 12 hours, so a clean phone is a habit, not a chore.

Discreet by design

CzenVault presents as a casual game. The vault opens only with your passphrase. What looks like playtime is your privacy, working quietly.

Yours, completely

Restore everything to your phone at any time and walk away — no lock-in, no export fees, no hostage data. Leaving takes minutes, and we tell you exactly how.

Tag from anywhere — share to the vault

You don't even need to open CzenVault to tag something. From any app that can share — your gallery, a file manager, a browser — tap Share and choose Nuclear War 80's (that's the vault app's cover name). The item lands in your sweep queue instantly.

Sharing only tags. Nothing is encrypted or uploaded at that moment and nothing is deleted — archiving happens on your schedule, via the 12-hour automatic sweep or the in-app sweep button. You stay in control: anything you tagged by mistake can be untagged in File Marker before the next sweep.

Android share sheet with Nuclear War 80's as a share target
Sharing a photo from your gallery — the vault appears as "Nuclear War 80's".
Toast confirming the shared item was added to the sweep queue
A quiet confirmation — the photo is tagged and queued for the next sweep.
File Marker showing the item received via share
The shared item sits in File Marker, ready for the next clean sweep.

Choose your plan

Android only - no iPhone version exists

CzenVault is Android only — there is no iPhone version. The app is downloaded directly from this site (not the Play Store), and it needs Android 8 or later. Make sure the phone you subscribe on is an Android phone. New here? See exactly what installing looks like →

Monthly

$10
AUD / month · 10 GB vault · 3 GB/mo uploads
Subscribe
save 10%

Quarterly

$27
AUD / 3 months · $9 a month · 10 GB vault · 3 GB/mo uploads
Subscribe
save 20%

Half-Yearly

$48
AUD / 6 months · $8 a month · 15 GB vault · 5 GB/mo uploads
Subscribe
best value · save 30%

Yearly

$84
AUD / year · $7 a month · 20 GB vault · 5 GB/mo uploads
Subscribe

Right after checkout: PayPal activates your subscription and your private access token is emailed to you within minutes, together with the app download link and a short setup guide. Nothing to configure on this page — the email has everything.

Every plan includes: encrypted vault storage with a generous allowance · encrypted text & voice messaging · SCIF secure viewing · automatic scheduled sweeps · delete-from-vault control · the Android app by direct download.

Your vault is a midpoint, not a hoarder's attic. Tag things on your phone, they're encrypted and swept to your vault, then download collections to your computer with the free offline viewer and delete them from the vault to free space. Your master copy lives with you — the server holds only what's in transit.

Storage per plan: Monthly and Quarterly — 10 GB vault, 3 GB/month uploads · Half-Yearly — 15 GB, 5 GB/month · Yearly — 20 GB, 5 GB/month. Uploads reset on the 1st. Near the cap the app warns and pauses auto-upload — nothing is ever deleted for you, and you can always download or delete collections yourself.

Secure checkout via PayPal — no card details ever touch our server. Longer plans mean fewer charges on your statement and nothing to think about month to month. Cancel anytime; your data walks home with you.

The offline viewer — read your archive on a computer

Subscribers and past subscribers can download a small, free program for Windows, Mac and Linux that opens your downloaded archive collections on a real screen. It is a read-only window: it can never add, change or delete anything. Every write to your vault happens from the Android app, so there is exactly one way in and one way out for your data.

It runs entirely on your computer — after the initial download it needs no internet at all, so your archive can be read with the network switched off.

How to get it: in the app, open Settings → Members area → Get member code. The code is valid for 7 days and is not your access key or your passphrase — it only unlocks the members page. Enter it at czenvault.czenring.com/members and the downloads and step-by-step guides are right there. The Android app itself is there too — reinstalls and new phones never need an email.

The members area is deliberately gated to subscribers and past subscribers only. The viewer's whole job is opening strong encryption with your passphrase — we would rather not hand that tool to people whose only interest in it would be attacking the encryption.

The CzenVault members page asking for a member code
The members gate — paste the code from the app, no passphrase involved
Inside the CzenVault members area showing download buttons for Windows, Mac, Linux and the Android app, each with its platform logo
Inside: viewer downloads for all three systems — plus the Android app for reinstalls and new phones

Installing on your phone — what you'll see

CzenVault is not on the Play Store, so Android treats the download as an "unknown app" and shows security warnings. That is normal and expected — the screenshots below are real, taken on two different Android versions, so you know exactly what to tap no matter how your phone words it.

Step 1 — Tap the downloaded file

After subscribing you get an email with the download link. Once CzenVault.apk finishes downloading, open it from your notifications or the Downloads folder. Your phone will stop you with a warning like one of these — this is Android protecting you, not a problem:

Android 16 security warning: your phone is not allowed to install unknown apps from this source
Tap Settings
Android 14 security warning: for your security your phone currently is not allowed to install unknown apps
Same warning, different words

Step 2 — Allow installs from your browser

The next screen asks permission for the app that downloaded the file (your browser). Switch Allow from this source on, then go back:

Android 16 install unknown apps screen with Allow from this source switched on
Switch it on
Android 14 install unknown apps screen with Allow from this source switched on
Same switch, other version

Step 3 — Install

Back in your downloads, tap the file again and confirm:

Android 16 install dialog: do you want to install this app, with Cancel and Install buttons
Tap Install
Android 14 install dialog: do you want to install this app
Same on Android 14

The app is large (about 230 MB) so installation takes a minute:

Android 16 installing progress dialog
Installing…
Android 16 app installed dialog with Done and Open buttons
Then — installed. Tap Open
CzenVault opening screen presented as the Nuclear War 80s game
What you'll see first: the game screen. Your vault is behind the passphrase — see your welcome email.

After you install — one-tap setup

Your welcome email has a green ONE-TAP SETUP button. Install CzenVault first, then come back to the email on your phone and tap it: CzenVault opens and offers to save your access key for you — no typing, no copying and pasting between apps. Your passphrase is chosen next, and that never leaves your hand.

The CzenVault welcome email showing the green ONE-TAP SETUP button above the manual steps
The welcome email (shown opened in a browser) — the green button does the connecting for you
CzenVault asking permission to save the access key from the welcome email
CzenVault opens and asks before it saves anything — your call
CzenVault settings with the vault server URL and access key already filled in
Done — Settings already shows your server and access key. Just set your passphrase.

Prefer to do it by hand? The email also lists the manual steps, and the access key is there to copy whenever you want it.

Different phone, different words

Manufacturers reword these dialogs. On Samsung phones Play Protect may say "Install anyway" instead of showing an install button — the steps are identical. Older phones may also show the app's technical name during install — that is normal.

If Google Play Protect ever says this app is not scanned or unknown, tap More details → Install anyway. CzenVault is distributed by direct download only, so Play Protect has no Play Store record to match it against.

Google Play Protect consent screen: Turn on Play Protect scanning, with Turn on button
If Play Protect is switched off, Android asks first — Turn on is safe
Google Play Protect scan result: No harmful apps found, with CzenVault among recently scanned apps
The real scan result: No harmful apps found — CzenVault passes
Android 14 app installed dialog showing the app's technical name
Some phones show the technical name — that's CzenVault

If it says "Out of space"

Out of space dialog: app could not be installed, free up some space and try again
Free up some storage (old photos, videos, unused apps) and tap the file again.

Still stuck? Email support@czenring.com and we will walk you through it.

Verified & transparent

Trust claims are cheap. Here is what we can show instead of tell. Everything below was pulled from the actual APK you download — the same file, verified with public tools.

Scanned by Google — and it passed

The APK was installed on a real signed-in Android device and scanned by Google Play Protect: “No harmful apps found.” The screenshots in the install guide above are that real scan. We make no privacy claims on Google's behalf — Play Protect checks for harmful behaviour, and CzenVault has none to find.

No trackers. No analytics. No ads.

The compiled app was examined: the only third-party code inside is Android's own UI library and Google's QR-code scanner. There is no analytics SDK, no ad network, no crash reporter, no social tracker — nothing that phones home to anyone but your own vault.

The game's high-score board is the one exception to “phones home”: a win can post your chosen nickname and score to an anonymous, per-difficulty leaderboard. It stores nothing else — no account, no auth token, no IP address, no link to your vault — and a better score simply replaces your old one. Ignore the board and it stays silent.

Every permission, and why

Android shows you each of these before granting it. Nothing here is requested silently or in the background.

Permission What it is for
Photos & videoReading the items you tag so they can be encrypted and uploaded to your vault.
ContactsArchiving your contact list, and writing it back only when you choose to restore.
SMS (read only)Archiving message threads you select. CzenVault can never send a text on your behalf.
CameraScanning the QR code when you pair another vault user as a contact.
MicrophoneRecording a voice note inside vault messaging — only while you hold record.
InternetUploading your encrypted archive to your own vault, over an encrypted tunnel.
Notifications & backgroundRunning the 12-hour auto-upload sweep for anything left tagged, and telling you when it completes.

And what CzenVault never asks for: your location, your call history, the ability to send SMS, your phone's identifiers, or accessibility controls.

Where your data goes

From your phone, tagged items are encrypted with your passphrase (Argon2id + AES-256-GCM) before they leave the device, then sent to your vault over an encrypted connection — HTTPS, or a WireGuard tunnel if you connect through your own network. The server stores only ciphertext — files we cannot open, names we cannot read. There is no second destination, no CDN copy, no “anonymous statistics”.

What Store and Wipe actually does

When a sweep archives your tagged items and wipes the originals, the deletion is not a sleight of hand: each file's bytes are overwritten with random data and forced to storage before it is unlinked, so undelete and carving tools find garbage where your files used to be. We'll tell you the limits plainly: phone flash storage is wear-levelled, so no app can commandeer the controller, and contacts and SMS live in Android's own databases where only deletion is possible — your device's built-in encryption is the backstop there. Most importantly, the wipe only runs after your encrypted copy is confirmed in the vault, never before.

Verify us: the tools used above (aapt, a zip tool) are free and public. Download the APK yourself and check — it should always match this page.

Leaving? Restore first.

Because we cannot read your vault, we cannot hand it back to you as a file. Before you cancel, open the app and restore everything to your phone, then back it up by whatever method you trust.

If a payment fails, you get a 14-day grace period with full access and clear warnings. After cancellation we keep your encrypted vault for 30 days in case you return — then it is permanently deleted. After deletion, no one can bring it back. Not us, not anyone.

Questions

What happens if I forget my passphrase?

Your data is gone. That is not a policy — it is the mathematics of real encryption. We store no copy of your passphrase and no recovery key. Write it down and keep it somewhere safe off your phone.

Can you read my files or messages?

No. Encryption happens on your phone before anything is uploaded. The server stores sealed ciphertext in anonymous folders and mailboxes, and mailbox traffic is never logged.

Can you recover my data for law enforcement?

No. We hold only ciphertext, and we do not have your passphrase. There is nothing readable to hand over — by design, not by discretion.

What phones are supported?

Android. The app is installed by direct download (a link we send you after subscribing) — it is not on the Play Store.

Reinstalling, or moving to a new phone?

Don't create a new vault. On first launch, tap “Already a player? Restore your progress”, enter the access key from your welcome email and your passphrase — your vault reconnects and everything is where you left it. Use Archive Control to restore collections back onto the new device.

Does deleting really delete?

Inside the app, wiping a swept file means its bytes are overwritten with random data before it is removed — see the Verified & transparent section above for the full, honest picture including the limits. Deleting a collection from your vault (Archive Control) warns you first: files still on your phone are safe, but if the originals are gone, that data is unrecoverable.

Why a subscription?

Your vault lives on a server we operate and back up. A flat $10 AUD/month covers that — no ads, no data selling, no investors to please. Privacy tools funded by anything other than their users eventually answer to someone else.