PassManager

PassManager privacy policy

Last updated: 2026-09-28

PassManager is an offline password manager. This policy explains what happens to your data.

We collect nothing

The app has no account, no server and no internet access (it does not request the Android INTERNET permission). It contains no analytics, advertising or crash-reporting code. We never receive any of your data.

Your vault

Everything you store is encrypted on your phone with XChaCha20-Poly1305, using a key derived from your master password with Argon2id. The vault is excluded from system and cloud backups. Your master password is not stored and cannot be recovered by anyone.

Device features, used on the phone only

• Camera: scans text or QR codes you point it at. Frames are processed on the device and never stored or sent.
• Pictures you pick: read on the device to recognise text, never stored.
• Bluetooth / nearby devices: used only when you move your vault to a new phone. The link runs directly between your two phones and is end-to-end encrypted. It is never used to determine location.
• Biometrics: unlock uses the system fingerprint or face prompt. The app never sees your biometric data.

Backups and imports

Encrypted backup files and CSV imports are created or read only when you choose to, at a location you pick.

Deleting your data

Use Settings > Erase vault from this phone, or uninstall the app. Nothing is stored anywhere else, so that removes all data.

Children

The app is not directed at children and collects no data from anyone.

Contact

a.kilincarslan97@gmail.com