Privacy Policy for MyPassSafe
MyPassSafe is an offline password manager. Your passwords, notes and two-factor codes are encrypted on your device with a key derived from your master password. There is no MyPassSafe account, no developer server that stores your data, and no advertising or analytics SDK in the app.
Summary
- We do not collect, receive or sell your personal data.
- Your vault is encrypted on the device with AES-256-GCM. The key is derived from your master password using PBKDF2-HMAC-SHA256 with 210,000 iterations.
- Your master password is never stored anywhere and never leaves the device.
- Nothing is uploaded unless you connect Google Drive yourself. If you do, only the already encrypted vault file is uploaded, into your own private app-data folder in your own Google Drive.
- Payments are handled entirely by Google Play. The app never sees your card or billing details.
Who is responsible
MyPassSafe is developed and published by an individual developer, referred to below as “we”. For any privacy question or request, contact dev.drozd@gmail.com.
What is processed, and where it stays
Almost everything MyPassSafe handles never leaves your device. The table below lists every category of data the app touches.
| Data | Purpose | Leaves the device? |
|---|---|---|
| Master password | Deriving the encryption key for your vault | No. It is not stored, not even locally, and is held in memory only while the app is unlocked. |
| Vault contents: titles, usernames, passwords, websites, app package names, notes, tags, two-factor secrets | The password manager itself | No, unless you enable Google Drive backup — and then only as an encrypted file (see below). |
| Biometric unlock secret | Unlocking without retyping the master password | No. Stored in Android's encrypted keystore and excluded from Android backups, so it cannot travel to another device. |
| Website and app icons | Recognising entries visually | Website icons are downloaded from the website you saved. The icon cache is excluded from Android backups. |
| List of installed apps | Letting you pick an installed app when adding a credential, and showing readable names for app credentials imported from Google Password Manager | No. Read on the device and never transmitted. |
| Email address of the Google account you connect | Showing which account the backup is linked to | No. Displayed in settings; not sent to us. |
| Purchase status (whether Pro is active) | Unlocking Pro features | The purchase itself is processed by Google Play. The app stores only a flag indicating an active entitlement. |
| Preferences: theme, language, auto-lock timeout, sync settings | App behaviour | No. May be included in your own Android backup if you have it enabled. |
How encryption works
- Your vault is stored as an encrypted container. The payload is encrypted with AES-256-GCM, which also detects tampering.
- The encryption key is derived from your master password with PBKDF2-HMAC-SHA256 over 210,000 iterations, using a random salt per vault.
- The data key is generated randomly and stored wrapped by the key derived from your master password, so changing your master password re-wraps the key without re-encrypting your data.
- Screenshots and the recent-apps preview are blocked inside the app, so vault contents do not end up in system screenshots or thumbnails.
If you forget your master password, your vault cannot be recovered
We cannot reset it, and neither can Google. There is no recovery key, no backdoor and no copy of your password on any server — that is what makes the encryption meaningful. Keep an encrypted export in a safe place, and remember that the export is protected by the same master password.
Optional Google Drive backup
Google Drive synchronization is off until you connect an account yourself. When you enable it:
- The app requests access only to your Google account's email address and to
the app data folder scope
(
https://www.googleapis.com/auth/drive.appdata). This is a private area of your own Google Drive reserved for this app. It grants no access to your other Drive files, documents or photos. - Only the already encrypted vault file is uploaded, together with cached icons and minimal synchronization metadata (file identifiers, revision markers). Your master password is not uploaded, so nobody — including us and Google — can decrypt the backup without it.
- Transfers use HTTPS.
- You can choose Wi-Fi-only synchronization, disconnect the account at any time, or delete the cloud copy from within the app.
- Data in your Google Drive is subject to Google's Privacy Policy.
We have no access to your Google account and receive no copy of your backup.
Website icons
When you save a website entry, the app may request that website's icon directly
from the site (for example /favicon.ico). This means the website
you saved can observe a request coming from your device's IP address, exactly as
it would if you visited it in a browser. Nothing about your credentials is sent
with such a request, and no third-party icon service is involved. Icon
downloading follows the same network preference as vault synchronization.
Permissions the app requests
- Camera — scanning QR codes for two-factor setup and for transferring a password to another device. Frames are processed on the device, not recorded and not uploaded.
- Internet — Google Drive backup, website icons and purchase verification. The app works fully offline without it.
- Biometrics — local unlock only. The app never receives your fingerprint or face data; Android only reports success or failure.
- Query installed applications — showing the list of apps so you can pick one when adding a credential, and resolving app package names to readable names when importing from Google Password Manager. This list never leaves the device.
- Billing — Google Play in-app purchases for the Pro tier.
Purchases
MyPassSafe Pro is sold as a monthly or yearly subscription, or as a one-time purchase. All payments are processed by Google Play under Google's Privacy Policy and the Google Play terms. We never see or store your payment details; the app only records whether an entitlement is currently active. Subscriptions renew automatically until cancelled. Manage or cancel a subscription, and request refunds, through your Google Play account.
Losing Pro never removes access to your data: all vaults, passwords and existing two-factor codes stay readable and exportable. Only automatic cloud synchronization is switched off.
Data sharing
We do not sell, rent or share your personal data. There are no advertising networks, no analytics or crash-reporting SDKs, and no advertising identifiers in the app. The only external services involved are the ones you choose to use: Google Drive for backup, Google Play for purchases, and the websites whose icons the app fetches.
Data retention and deletion
We hold no data about you, so there is nothing on our side to delete. You remain in control of everything:
- Delete individual entries, or a whole vault, inside the app.
- Delete the cloud copy from the app when removing a vault, or from your Google account settings.
- Disconnect Google Drive at any time.
- Uninstall the app to remove all local data, including the vault and the biometric secret. If you enabled Android backup, also remove the app's backup from your Google account.
Deleted entries are kept as empty markers, stripped of every secret field, for up to 180 days. This is required so that deleting an entry on one device also deletes it on your other devices instead of the entry reappearing on the next synchronization. These markers contain no passwords, usernames or notes.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete personal data held about you, and to lodge a complaint with a data protection authority. Because MyPassSafe stores your data only on your own device and, optionally, in your own Google Drive, you can exercise access, export and deletion directly in the app at any time. If you have questions about this, write to dev.drozd@gmail.com.
Children
MyPassSafe is not directed at children and is intended for users aged 18 and over. We do not knowingly process data from children.
Security
We use encryption at rest, an encrypted keystore for the biometric secret, HTTPS for all network traffic, and screenshot blocking inside the app. No system can be guaranteed absolutely secure, and the security of your vault also depends on your master password and on your device: choose a strong, unique master password, keep your device locked, and keep its software up to date.
Changes to this policy
If this policy changes materially, we will update the date at the top of this page and, where the change affects how data is handled, note it in the app's release notes.
Contact
Questions, requests or privacy concerns: dev.drozd@gmail.com