Privacy Policy
Last Updated: October 22, 2026
PassforAll ("the App") is an offline password management application developed to help users securely store and manage their passwords and account information.
We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information is stored locally, what information may be collected or processed by third-party services, how such information is used, and what rights users may have regarding their personal information.
By using the App, you acknowledge the data practices described in this Privacy Policy. Where required by applicable law, we will obtain your consent separately.
1. Overview and Privacy Principles
PassforAll is designed with a local-first approach to password management.
No account registration is required.
Password management features work without an internet connection.
Passwords and account information are stored locally on the user's device.
The developer does not operate a server for storing users' password vaults.
Master passwords and stored account passwords are not transmitted to the developer's servers.
Internet connectivity may be used for purchase verification, subscriptions, analytics, crash reporting, and other necessary third-party service operations.
Although password vault data is stored locally, certain technical information, usage data, diagnostic information, and purchase-related information may be collected or processed by Apple, RevenueCat, and Google Firebase.
2. Information Stored Locally on Your Device
Users may enter and store the following information:
Website and service names
Usernames, user IDs, and account identifiers
Account passwords
Notes and other information entered by users
Application preferences and settings
Encrypted password database files
Locally stored backup files
This information is used to provide the App's password management functionality.
Password vault contents are stored in encrypted form on the user's device.
The developer does not collect, access, or store the plaintext contents of users' password vaults on developer-managed servers.
Users are responsible for managing their locally stored information and creating appropriate backups.
3. Master Password and Encryption
The master password is used to protect access to encrypted password data.
The App does not store the user's master password in plaintext on developer-managed servers.
Encryption keys are derived using established cryptographic methods to protect locally stored password information.
The developer does not maintain a master password recovery service.
If a user forgets their master password, access to encrypted password data may be permanently lost.
Users should keep their master passwords secure and maintain backups where appropriate.
4. Information Collected Through Third-Party Services
The App integrates third-party services to provide purchase management, application analytics, and crash reporting.
These services may automatically collect or process certain information depending on SDK configuration, device settings, and the user's interaction with the App.
4.1 Firebase Analytics (Google)
PassforAll uses Google Firebase Analytics to understand general application usage and improve the user experience.
Firebase Analytics may collect or process information such as:
App instance identifiers
Application installation and launch events
Session counts and session duration
Application version and update events
Device model and operating system information
General geographic information
Application usage events
In-app purchase events and related analytics
Other technical information required to provide analytics functionality
This information may be used to:
Understand overall application usage
Identify usability issues
Evaluate application performance
Improve features and user experience
Analyze aggregated usage trends
Firebase Analytics is not intended to collect the contents of users' stored passwords, master passwords, or password vaults.
4.2 Firebase Crashlytics (Google)
PassforAll uses Firebase Crashlytics to identify application crashes, diagnose technical problems, and improve application stability.
Firebase Crashlytics may collect or process:
Crash reports and stack traces
Application state at the time of a crash
Crashlytics installation identifiers
Firebase installation identifiers
Device model and hardware information
Operating system and application versions
Crash timestamps and diagnostic information
Relevant application events associated with crashes
Developer-configured diagnostic logs and custom keys, where applicable
This information is used to:
Investigate application crashes
Identify software defects
Improve application reliability
Resolve compatibility and performance issues
Crashlytics is not intended to collect users' master passwords or the contents of their password vaults.
We seek to avoid including sensitive password information in diagnostic logs, custom events, or crash reports.
4.3 RevenueCat
PassforAll uses RevenueCat to manage in-app purchases, subscriptions, premium feature access, and purchase restoration.
RevenueCat may process:
Purchase and subscription status
Purchase transaction information
App Store receipt and transaction data
Application user identifiers
Product identifiers
Subscription expiration and renewal information
Device and operating system information
Application version and other technical information required for purchase management
RevenueCat uses this information to:
Verify purchases and subscriptions
Restore previous purchases
Determine premium feature eligibility
Maintain purchase and subscription records
Support purchase-related troubleshooting
The App does not transmit users' stored account passwords or master passwords to RevenueCat.
For more information, please review:
RevenueCat Privacy Policy:
https://www.revenuecat.com/privacy/
5. Payment Information
In-app purchases and subscriptions are processed through Apple's App Store payment system.
The developer does not directly collect or store:
Credit card numbers
Credit card expiration dates
Credit card security codes
Bank account numbers
Other complete payment card credentials
Apple processes payment transactions according to its own terms and privacy policies.
Purchase records and subscription information may be shared with RevenueCat to provide purchase verification and subscription management.
Refunds, billing disputes, and payment-related matters may be subject to Apple's applicable policies.
6. Purposes of Information Processing
Information processed by the App or its third-party service providers may be used for the following purposes:
Providing password management functionality
Maintaining application settings and local data
Verifying in-app purchases and subscriptions
Restoring previous purchases
Providing access to premium features
Understanding application usage
Improving usability and functionality
Detecting and resolving crashes
Maintaining application stability and security
Preventing fraud and unauthorized use
Responding to customer inquiries
Complying with applicable laws and platform requirements
We do not intentionally use users' stored password vault contents for analytics, advertising, or marketing.
7. Data Sharing and Third-Party Service Providers
PassforAll uses the following third-party services:
Apple Inc.
Purpose: App Store distribution, in-app purchases, subscription billing, and transaction processing.
Privacy Policy:
https://www.apple.com/legal/privacy/
Google LLC — Firebase Analytics
Purpose: Application usage analytics and service improvement.
Privacy Information:
https://firebase.google.com/support/privacy/
Google LLC — Firebase Crashlytics
Purpose: Crash reporting, diagnostics, and application stability.
Privacy Information:
https://firebase.google.com/support/privacy/
RevenueCat, Inc.
Purpose: Subscription management, in-app purchase verification, and purchase restoration.
Privacy Policy:
https://www.revenuecat.com/privacy/
These providers may process information according to their respective privacy policies, contractual obligations, and applicable laws.
The developer does not provide password vault contents to these third-party services.
8. Sale of Personal Information and Advertising
The developer does not sell users' personal information.
The developer does not intentionally share users' personal information with third parties for cross-context behavioral advertising.
PassforAll does not use stored passwords or password vault contents for advertising or marketing purposes.
The use of Firebase Analytics is intended for application analytics and service improvement rather than advertising personalization.
Where applicable law grants users rights to opt out of the sale or sharing of personal information, users may contact us using the information provided below.
If the App's advertising or data-sharing practices materially change, this Privacy Policy will be updated and additional notices or choices will be provided where required by law.
9. Data Retention
Locally Stored Password Data
Passwords, account information, application settings, and local backups are generally retained on the user's device until deleted by the user or removed through applicable device or application storage processes.
Uninstalling the App may delete locally stored application data, but certain information stored in system-managed storage, such as Keychain items, may persist depending on the operating system and implementation.
Files exported or backed up by the user to external storage, including iCloud, are controlled by the user and the relevant storage provider.
Firebase Analytics Data
Analytics data may be retained according to the Firebase or Google Analytics retention settings configured for the App and Google's applicable policies.
Retention periods may vary depending on the type of information and the configuration of the service.
Firebase Crashlytics Data
Crash reports, diagnostic data, and associated identifiers are retained according to Firebase Crashlytics' applicable retention policies.
Google states that certain Crashlytics crash data and associated identifiers are retained for approximately 90 days before the removal process begins.
RevenueCat and Apple Data
Purchase records, subscription information, and transaction-related technical data may be retained according to RevenueCat's and Apple's respective policies and applicable legal obligations.
10. Data Deletion and Privacy Requests
Users may delete password entries and other locally stored information using available features within the App.
Users may also remove application data through device management options, subject to operating system behavior.
Deleting the App does not necessarily delete information independently retained by Apple, RevenueCat, Google, or user-selected backup services.
Users may contact us to request information about the personal data processed in connection with the App or to request assistance with applicable deletion requests.
Privacy Contact:
passforall.help@gmail.com
We will review requests and respond in accordance with applicable law.
We may request information reasonably necessary to verify the requester's identity or identify relevant records.
Where information is controlled by a third-party service provider, we may direct users to the provider's privacy request process or assist with the request where reasonably possible.
Certain information may be retained where required or permitted by law, including transaction records necessary for accounting, fraud prevention, or legal compliance.
11. User Privacy Rights
Depending on the user's location and applicable law, users may have rights to:
Request information about personal data collected or processed
Access certain personal information
Request correction of inaccurate personal information
Request deletion of eligible personal information
Request restrictions on certain processing activities
Opt out of certain data sales, sharing, or targeted advertising activities, where applicable
Withdraw consent where processing is based on consent
Exercise applicable privacy rights without unlawful discrimination
Users may submit privacy-related requests by emailing:
passforall.help@gmail.com
We will handle requests in accordance with applicable laws and any relevant verification requirements.
If applicable law provides a right to appeal a decision concerning a privacy request, users may contact us to request further review.
12. International Data Processing
PassforAll may be used in the United States, South Korea, and other countries.
Third-party service providers such as Google, Apple, and RevenueCat may process or store technical information, analytics data, diagnostic information, and purchase-related information in countries other than the user's country of residence.
Such processing may be subject to different data protection laws.
Where required by applicable law, appropriate safeguards will be applied to international transfers of personal information.
The specific locations and safeguards used by third-party providers may be described in their respective privacy policies and contractual documentation.
13. Data Security
PassforAll is designed to protect locally stored password information through encryption and application-level security measures.
Security features may include:
Encryption of password entries
Encryption of the local password database
Master password protection
Automatic application locking
Device integrity checks
Local backup and restore functionality
The developer takes reasonable technical and organizational measures to protect information processed through the App.
However, no electronic storage system, application, or method of data transmission can guarantee absolute security.
Users are encouraged to:
Use strong and unique master passwords
Enable device-level security protections
Keep their operating systems updated
Store exported CSV files securely
Maintain appropriate backups
Avoid sharing sensitive credentials
Exported CSV files are not encrypted by the App and should be handled carefully.
14. Data Loss and Recovery
PassforAll does not provide a developer-managed master password recovery service.
If a user loses their master password, the developer may be unable to decrypt or restore encrypted password data.
Data loss may also occur due to:
Device loss or malfunction
Application deletion
Device replacement or reset
Operating system changes
Forgotten master passwords
Missing or damaged backups
User actions or configuration changes
Users are encouraged to maintain secure backups.
To the extent permitted by applicable law, the developer's liability for data loss or inability to access data may be limited where the loss results from circumstances beyond the developer's reasonable control.
Nothing in this section limits rights or remedies that cannot legally be excluded.
15. Children's Privacy
PassforAll is not specifically directed to children under the age of 13.
The developer does not knowingly seek to collect personal information from children under 13 without any consent required by applicable law.
If we become aware that personal information has been collected from a child in violation of applicable legal requirements, we will take appropriate steps to address the matter, including deletion where required and reasonably possible.
Parents or legal guardians who believe that a child has provided personal information through the App may contact us at:
passforall.help@gmail.com
16. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in:
Applicable laws and regulations
Apple App Store requirements
Application features and functionality
Security practices
Third-party services
Personal information processing activities
When changes are made, the revised Privacy Policy and its updated effective date will be published on the relevant privacy policy page or made available through the App.
Where required by law, we will provide additional notice or obtain consent before implementing material changes.
The updated Privacy Policy will become effective on the date specified in the revised version.
17. Contact Information
For questions regarding this Privacy Policy, personal information processing, data deletion, or privacy-related requests, please contact:
Application: PassforAll
Developer / Privacy Contact: SungChul Lim
Email: passforall.help@gmail.com
Privacy Policy Website:
https://sites.google.com/view/passforall