Privacy Policy

Last updated: 2026-05-23

Short version: Passlock stores your data only on your iPhone (and your iCloud account, encrypted, if you turn that on). We do not run any servers and we do not collect anything from you. That includes crashes, opens, analytics, behavioural signals, IP addresses, your master password, or your vault contents.

1. What we collect

Nothing. The App Store privacy nutrition label for Passlock declares every category as "Data Not Collected." This page is the authoritative statement of that claim.

2. What lives on your device

• Your vault. Stored in an encrypted SQLite database managed by Apple's SwiftData framework. Each entry is encrypted with a per-entry key derived from your master key via HKDF.
• Your master key. Derived from your master password via PBKDF2-SHA256, 600,000 iterations, with a per-install random salt stored in the iOS Keychain with the kSecAttrAccessibleWhenUnlockedThisDeviceOnly protection class.
• Your master password. Never stored anywhere. If you forget it, we cannot recover your vault.
• Optional biometric unlock. If you turn on Face ID / Touch ID unlock, a cached copy of the master key is stored in a separate Keychain item gated by .biometryCurrentSet. Changing the enrolled biometric on your device invalidates that cached copy automatically.

3. iCloud sync (optional, V1.1+)

If you opt in to iCloud sync, the encrypted ciphertext of each vault entry is replicated to your private iCloud database via Apple's CloudKit service. Apple cannot read the ciphertext — we never upload a copy of your master key or master password. You can revoke sync at any time in Settings.

4. AutoFill extension

The AutoFill extension reads only non-secret metadata (entry title, domain, username) from a shared App Group on your device in order to render the list of suggestions. The encrypted payload is only decrypted after you authenticate via Face ID / Touch ID inside the extension UI.

5. Network behaviour

The app contacts Apple's StoreKit servers to validate subscriptions and (if you opt in) Apple's CloudKit servers to sync the ciphertext of your vault. The app makes no other network requests. There is no third-party SDK in the binary.

6. Subscriptions

Subscriptions are managed by Apple. We do not receive a copy of your Apple ID, payment information, or any personally identifying detail. We see only the anonymous transaction event Apple forwards to the device, which the app verifies using Apple's Transaction API.

7. Children

Passlock is rated 4+ and does not collect any data, so there is no data to handle differently for children. Adults should set up their own master password.

8. Changes to this policy

If we change anything that affects what data is collected, we will ship a new build that triggers an updated App Store privacy nutrition label, and update this page. The "Last updated" date at the top is authoritative.

9. Contact

Zhang Jiahao · jasperabundant@gmail.com