Last Updated: August 20, 2026
ELGAR SOLUTIONS LTD (“Company”, “we”, “us”, or “our”) operates the mobile application “Been Pwned? Breach Checker” (the “App”).
This Privacy Policy explains how we collect, use, process, store, and protect information when you use the App.
By downloading, accessing, or using the App, you acknowledge that you have read and understood this Privacy Policy.
Been Pwned? Breach Checker is a security and privacy utility designed to help users determine whether their login credentials or passwords may have appeared in known data breaches or compromised credential databases.
The App may allow users to:
Check email addresses, usernames, or other login identifiers for known data exposures;
Check passwords for potential compromise;
Receive information about detected breaches or exposures;
Generate or select stronger passwords;
Save passwords and credentials within the App for the user's personal use;
Review previously saved security information.
The App is intended to help users improve their personal account security. It does not guarantee that an account, password, or other information has never been compromised.
Depending on the features you use, the App may process information that you voluntarily enter, including:
Email addresses;
Usernames or login identifiers;
Passwords;
Generated passwords;
Website or service names associated with saved credentials;
Other information you voluntarily enter into the App.
You are not required to provide information that is not necessary for a particular feature.
Because passwords and login information may be highly sensitive, you should only enter information that you intend to check, manage, or store using the App.
The App may allow you to save passwords and credentials for your personal use.
Where supported by the App's implementation, saved passwords may be stored locally on your device using available platform security mechanisms, such as Apple's Keychain or equivalent secure local storage.
The Company does not sell your passwords or use your saved passwords for advertising purposes.
You are responsible for protecting access to your device and for maintaining the security of any credentials saved within the App.
To provide breach and compromised-credential checking functionality, the App may transmit certain information to third-party security services.
The services currently used by the App may include:
LeakCheck
https://leakcheck.io
Enzoic
https://console.enzoic.com/
These services process information submitted through the relevant security-checking functionality according to their own privacy policies, terms, security practices, and technical procedures.
For Enzoic's Password, Credentials, and Exposure APIs, Enzoic states that submitted query data is processed in memory and is not stored or logged for those API checks. Enzoic also states that its credential and password checks use privacy-preserving partial-hash methods.
You should review the applicable third-party privacy policies before using the corresponding functionality.
We may process information to:
Provide breach and credential checking functionality;
Determine whether submitted information appears in known compromised-data sources;
Display breach or exposure results;
Generate stronger passwords;
Allow you to save and manage credentials;
Maintain and improve the App;
Diagnose technical problems and errors;
Protect the security and integrity of the App;
Prevent abuse, fraud, or unauthorized use;
Comply with applicable legal obligations.
We do not use submitted passwords for targeted advertising.
We do not sell, rent, or trade your personal information.
Information may be disclosed only when reasonably necessary to:
Provide functionality requested by you;
Use third-party service providers required to operate the App;
Comply with applicable laws, regulations, court orders, or lawful governmental requests;
Protect the rights, property, safety, or security of the Company, our users, or others;
Detect, prevent, or investigate fraud, abuse, security incidents, or unauthorized activity;
Complete a corporate transaction such as a merger, acquisition, restructuring, or sale of assets.
The App may rely on third-party infrastructure, APIs, analytics, hosting, payment, or security services.
Third-party providers may process limited technical or user-provided information as necessary to provide their services.
Each third-party service operates under its own privacy policy and terms.
In particular, Enzoic's published privacy policy describes its collection, use, disclosure, retention, security, and international data-transfer practices.
Depending on the App's configuration and the services used, limited technical information may be processed, such as:
Device type;
iOS version;
App version;
IP address;
Diagnostic information;
Crash information;
Security and fraud-prevention information.
Such information may be processed when necessary to maintain, secure, troubleshoot, and improve the App.
We retain information only for as long as reasonably necessary to provide the relevant functionality, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.
Information stored locally by the App remains on your device unless you delete it, uninstall the App, or otherwise remove it through the available functionality.
Third-party services may have their own retention policies. Their handling of information is governed by their respective privacy policies and service terms.
We take reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.
However, no electronic storage system or method of transmission over the Internet can be guaranteed to be completely secure.
You are responsible for maintaining the security of your device, Apple account, device passcode, and credentials saved in the App.
Because the App uses third-party service providers, information may be processed in countries other than the country in which you reside.
Such processing may be subject to the laws of the country where the relevant service provider operates.
For example, Enzoic states that its services may process and store personal information in the United States and other locations selected by the provider.
The App is not directed toward children under the age of 13.
We do not knowingly collect personal information from children under 13.
If you believe that a child has provided personal information through the App, please contact us so that appropriate action can be taken.
Depending on your country or region, you may have rights regarding your personal information, including:
The right to request access to personal information;
The right to request correction of inaccurate information;
The right to request deletion of personal information;
The right to object to or restrict certain processing;
The right to request data portability where applicable;
The right to withdraw consent where processing is based on consent.
Some rights may be subject to legal limitations.
To submit a privacy request, contact us using the information below.
If you are a California resident, you may have additional rights under applicable California privacy laws, including rights relating to access, deletion, correction, and information about the categories of personal information processed.
We do not sell personal information in the traditional sense.
To exercise applicable rights, contact us using the email address below.
If applicable to you, the processing of your personal information may be subject to the General Data Protection Regulation (GDPR) or other applicable European data-protection laws.
Where required by applicable law, we may rely on legal bases such as:
Your consent;
Performance of a contract;
Compliance with legal obligations;
Our legitimate interests, including security, fraud prevention, service improvement, and administration.
You may have the right to lodge a complaint with your local data-protection authority.
The App may contain links or references to third-party services.
We are not responsible for the privacy practices, content, security, or policies of third-party services.
Relevant services include:
LeakCheck: https://leakcheck.io
Enzoic: https://console.enzoic.com/
Your use of third-party services may be subject to their own terms and privacy policies.
We may update this Privacy Policy from time to time.
When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.
Your continued use of the App after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, to the extent permitted by applicable law.
If you have questions, requests, or concerns regarding this Privacy Policy or the processing of your information, please contact us:
ELGAR SOLUTIONS LTD
Email: david@elgarsolutions.space