SafePass is designed from the ground up with a strict privacy-first architecture. Our core philosophy is simple: your data belongs exclusively to you and should never leave your device.
1. Zero Data Collection & Zero Internet Access
SafePass does not collect, transmit, share, or sell any personal data, usage data, or credentials. The application operates 100% offline:
The application does not include the Android android.permission.INTERNET permission in release builds.
The application does not contain remote servers, cloud sync APIs, tracking software, advertising SDKs, or third-party analytics (such as Google Analytics or Firebase Crashlytics).
2. Local Storage and Encryption Architecture
All data entered into SafePass (account titles, usernames, passwords, categories, and notes) is stored solely in a local SQLite database on your device:
All sensitive fields are encrypted at rest using industry-standard AES-256 (CBC mode with PKCS7 padding).
Cryptographic encryption keys and master password hashes are generated and maintained in hardware-backed secure storage via the Android KeyStore / FlutterSecureStorage system.
Plaintext credentials only exist transiently in device memory while viewing or editing an entry.
3. Biometric Authentication
If you choose to enable Biometric Unlock (Fingerprint / Face Recognition), authentication is handled entirely by your device's native operating system through AndroidX BiometricPrompt APIs. SafePass does not capture, store, or process raw biometric data.
4. Encrypted Backups and Data Deletion
You have full ownership and control over your vault data:
Backups: You can export an offline backup file at any time. All vault items inside exported backup files remain AES-256 encrypted.
Data Deletion: You can delete individual entries at any time inside the app. To completely purge all stored vault data and encryption keys, simply uninstall the application or clear SafePass app storage in your Android system settings.
5. Changes to This Privacy Policy
Because SafePass is a completely offline application with zero telemetry, this privacy policy will only be updated if future application releases introduce major architectural changes. Any updates will always reflect our commitment to offline data privacy.
6. Contact Us
If you have any questions or inquiries regarding SafePass or this Privacy Policy, please contact the developer via the email provided on the Google Play Store developer listing.