Private, local-first vault