A high-security, serverless document organizer and vault for Android and Web. Built with Flutter, inspired by Google Pixel Material 3 aesthetics, and powered directly by your own Google Drive storage with hardware-backed encryption.
Features • Screenshots • Architecture • Privacy Policy • Terms & Conditions • License
[!NOTE] All captured screen snippets are sourced directly from real physical Android hardware testing (Redmi Note 8, 1080 × 2340 px native resolution) running production release builds.
| Authentication & Offline Vault | Home Dashboard (Light) | Live Drive Quota (Dark) |
|---|---|---|
![]() |
![]() |
![]() |
| Zero-backend Google OAuth & Offline Access | Pixel Material 3 UI & Renewal Attention | Real Google Drive Quota Breakdown |
| Document Explorer | Document Inspection & Renewal | Multi-Source Upload Sheet |
|---|---|---|
![]() |
![]() |
![]() |
| Multi-format filtering (PDF, JPG, DOCX) | Drive verified status & renewal tracker | Camera, Gallery, Files & Share-Intent |
| Security & Biometrics | Encrypted Cache & Quota | Safe Trash Recovery |
|---|---|---|
![]() |
![]() |
![]() |
| Fingerprint / Face lock & Drive state | Android KeyStore AES-256 cache (256 MB) | 30-day soft-delete retention window |
drive.appdata), completely shielded from accidental deletion, public sharing, or clutter in your main Google Drive.PdfRenderer. Full support for PDF, JPEG, PNG, WebP, GIF, HEIC/HEIF, and DOCX up to 50 MB.flowchart LR
subgraph Client["Vaulty Client (Android / Web)"]
UI["Pixel Material 3 UI & Motion"]
State["Riverpod State Machine"]
Cache["AES-256-GCM Local Cache\n(Android KeyStore)"]
Native["Native PDF & Share Intents"]
end
subgraph Google["Google Cloud Platform"]
Auth["Google OAuth 2.0"]
Drive["Google Drive v3 API"]
AppData["Hidden AppData Folder\n(drive.appdata)"]
end
UI --> State
State --> Cache
State --> Native
State -->|Direct TLS 1.3| Auth
State -->|Resumable Chunked Uploads| Drive
Drive --> AppData
For an exhaustive technical breakdown, consult the App Architecture Documentation and the Engineering Project Report.
| Dimension | Vaulty | DigiLocker | 1Password | Bitwarden | Google Drive / Dropbox | CamScanner |
|---|---|---|---|---|---|---|
| Backend Dependency | Zero (Serverless) | Government Central Server | Proprietary Cloud | Central Cloud Server | Multi-Tenant Cloud | Chinese Cloud Servers |
| Data Ownership & Storage | User’s Private Google Drive (drive.appdata) |
Government Database | 1Password Hosted Vault | Bitwarden Vault Server | Generic Public Cloud Storage | Proprietary Cloud Storage |
| Hardware-Backed Local Encryption | Yes (Android KeyStore AES-256-GCM) | No (Standard App Cache) | Yes (Master Key / Secure Enclave) | Yes (Encrypted Vault SQLite) | No (Unencrypted App Cache) | No (Plain Local Files) |
| Isolated App Folder (No Clutter) | Yes (Hidden AppData Folder) | N/A | Embedded in DB | Embedded in DB | No (Mixes with all Drive files) | No (App-specific gallery) |
| Document Expiry & Renewal Engine | Yes (30d, 7d, day-of native alerts) | No | Limited (Passport field expiry only) | Limited (Custom fields only) | None | None |
| Direct System Share-Intent Intake | Yes (From WhatsApp, Chrome, Files) | Limited | Limited | Limited | Yes | Yes |
| Offline Access Without Paywall | Yes (Full Encrypted Offline Vault) | Partial (Cached IDs only) | Yes (Requires Paid Plan) | Yes | Limited (Manual offline toggle) | Paywalled / Ad-supported |
| Emergency Full ZIP Data Export | Yes (Single-click complete unencrypted ZIP) | No (Individual PDFs only) | Proprietary 1PUX | JSON / CSV Export | Bulk Google Takeout | Manual batch export (Watermarked) |
| Third-Party Data Mining / Tracking | Zero (No Telemetry, No Ad SDKs) | Government Telemetry | Zero Ads (Paid Service) | Open Source / No Ads | Used for Analytics & Ad Profiles | Extensive Ad SDKs & Tracking |
| Price & Licensing | 100% Free & Open Source (MIT) | Free (Govt ID ecosystem) | $2.99 – $4.99 / mo | Freemium ($10 / yr) | Free tier / $1.99+ / mo | $4.99 – $9.99 / mo (Heavy Ads) |
drive.appdata — invisible to standard Google Drive browsing.Vaulty features a comprehensive automated testing matrix covering domain models, cryptographic storage, Riverpod state transitions, navigation boundaries, and bilingual localization:
00:21 +61 ~2: All other tests passed!
hi.dart) while ensuring user-entered names and raw dates are never corrupted.The application has undergone rigorous physical hardware testing via ADB across multiple Android OS generations:
| Physical Device | OS Version | Display | Test Result |
|---|---|---|---|
| Vivo V2315 | Android 14 (OriginOS) | 720 × 1612 | 3 Full Login/Logout Cycles Passed (Zero memory leaks, clean biometric state) |
| Redmi Note 8 | Android 11 (MIUI) | 1080 × 2340 | 3 Full Login/Logout Cycles Passed (Zero stream errors, real quota verified) |
├── .github/
│ └── workflows/
│ ├── build-apk.yml # Automated CI/CD for building downloadable release APKs
│ ├── ci.yml # Linting, formatting, and automated test suite runner
│ └── pages.yml # GitHub Pages automated Jekyll deployment
├── _includes/
│ └── head-custom.html # Client-side Mermaid.js renderer and site favicon
├── _config.yml # Jekyll site configuration and search console verification
├── docs/ # Project architecture, engineering reports, and setup guides
│ ├── assets/ # High-res vector icons and standardized 1080x2340 screenshots
│ ├── APP_ARCHITECTURE.md # Layer breakdown, cryptographic pipeline, and native bridges
│ └── PROJECT_REPORT.md # Engineering report, security threat model, and benchmarks
├── vaulty/ # Primary Flutter cross-platform mobile application
│ ├── android/ # Native Android host, KeyStore bridge, and FileProvider
│ ├── assets/ # Bundled fonts (Public Sans), tokens, and public configs
│ ├── lib/ # Application source code (Clean Architecture)
│ │ ├── app/ # Bootstrap, router (GoRouter), navigation shell
│ │ ├── core/ # Material 3 themes, abstract art, l10n (hi.dart, en), widgets
│ │ ├── data/ # Encrypted cache, Drive API v3, device services
│ │ ├── domain/ # Models (Document, StorageInfo) and repository contracts
│ │ └── features/ # Home, Documents, Upload, Search, Imports, Settings, Trash
│ └── test/ # Comprehensive unit, widget, and l10n test suites (61 tests)
├── vaulty-web-preview/ # Standalone static web preview environment
├── CONTRIBUTING.md # Contribution workflow, coding standards, and PR guidelines
├── CODE_OF_CONDUCT.md # Contributor Covenant Code of Conduct v2.1
├── LICENSE # MIT Open Source License
├── PRIVACY_POLICY.md # Zero-backend privacy policy and Google Limited Use disclosure
├── README.md # Project README and quickstart guide
├── SECURITY.md # Vulnerability reporting and security architecture
└── TERMS_AND_CONDITIONS.md # Legal terms of use and warranty disclaimers
^3.27.0)git clone https://github.com/Byte-Craftsman-Alpha/Document-Organizer.git
cd Document-Organizer/vaulty
flutter pub get
flutter analyze
flutter test
# Run with real Google Drive authentication
flutter run
# Or run with the standalone mock/fixture gallery (no Google credentials needed)
flutter run -t lib/main_demo.dart
To compile an optimized, production-ready release APK for Android:
cd vaulty
flutter build apk --release
The resulting binary will be located at:
vaulty/build/app/outputs/flutter-apk/app-release.apk
Every push and release tag triggers the automated .github/workflows/build-apk.yml workflow, which runs static analysis, executes all 61 automated tests, and generates a downloadable APK with SHA256 verification checksums attached to the GitHub release.
Aditya Chaudhari
Team Paradox
Vaulty is built with strict privacy and user data sovereignty principles. Review our legal policies:
This project is licensed under the MIT License — see the LICENSE file for details.