Privacy Policy

Effective Date: January 21, 2025
Last Updated: January 21, 2025
 

1. Overview

Calm Password is designed with privacy and security as its foundation.
All your data is stored locally on your device, encrypted using AES-256, and never transmitted over the internet.
We do not collect, track, or share any personal information.

2. Data Collection and Storage

Data Stored Locally

The app keeps the following data only on your device:

• Master password (stored as a salted hash, never in plain text)

• Password entries (username, password, notes, category)

• App settings and preferences

• Biometric unlock key (stored securely in Android Keystore)

Your passwords never leave your device. We have no access to your data and cannot recover it if lost.

Data Not Collected

We do not collect or store any of the following:

• Personal identifiers (name, email, phone number)

• Device information or usage analytics

• Crash reports

• Location or contact data

• Any cloud backups or external server data

In-App Purchases

All transactions are processed by Google Play Billing.
We only store a local record of the purchase (product ID and credits).
We do not have access to your payment details — these are securely handled by Google.

3. Use of Data

Your local data is used only to:

• Securely store and encrypt your passwords

• Provide biometric unlock for faster access

• Save app preferences

• Manage in-app purchase credits

We do not share, sell, or transmit any information to third parties.
The internet connection is used only for verifying Google Play purchases.

4. App Permissions

Calm Password requests minimal permissions to function properly:

• Internet permission – used only for in-app purchase verification via Google Play.
  It is not used for tracking or uploading any data.

• Biometric/Fingerprint permission – allows you to unlock the app using your fingerprint.
  Biometric data stays within Android’s secure Keystore and never leaves your device.

No other permissions are requested.
Calm Password does not access your camera, microphone, storage, contacts, location, or SMS.

5. Data Security

We use multiple layers of protection:

• All passwords are encrypted with AES-256

• Master password is hashed using SHA-256 with salt

• Biometric keys are stored in Android Keystore

• The app automatically locks after 2 minutes of inactivity

Encryption and decryption occur entirely on your device, ensuring total privacy.

6. Data Retention and Deletion

You have full control over your data.
You can:

• Delete individual password entries

• Empty the trash to permanently remove data

• Clear all app data in Settings > Danger Zone

When you uninstall Calm Password, all local data is permanently deleted.
Since we do not use cloud storage, your data cannot be recovered.
Always remember your master password — we cannot restore lost passwords.

7. Third-Party Services

Calm Password uses only trusted, platform-level services:

• Google Play Billing for in-app purchases (see Google Privacy Policy)

• Google AdMob may be added in future updates for non-personalized ads only.
  You can opt out anytime in Settings.
  (Currently, Calm Password shows no ads.)

8. Children’s Privacy

Calm Password is not intended for children under 13 years of age.
We do not knowingly collect information from minors.
If you believe a child has used the app, please contact us for assistance.

9. International Users

The app operates entirely offline.
No data is transferred or processed outside your device, regardless of your country.

10. Your Rights

You have the right to:

• View and edit your stored passwords

• Delete individual or all data at any time

• Disable fingerprint unlock

• (Future option) Export your data in encrypted form

11. Updates to This Policy

We may update this Privacy Policy from time to time.
Changes will be announced:

• In-app under Settings > Privacy Policy

• On our app store listing

• Via update notes for major revisions

By continuing to use the app, you accept the updated terms.

12. Data Breach Notice

Because Calm Password runs fully offline and encrypts all information locally,
there is no risk of a remote data breach.
Your data security depends on your device’s safety.
We recommend using a strong master password and keeping your OS up to date.

13. Contact Us

For privacy concerns or data questions, contact us at:
📩 calmpassword@gmail.com

Your privacy is absolute. Your passwords never leave your device. 🔒