PassNook: Password Manager
PassNook: Password Manager
Last updated: October 22, 2026
PassNook: Password Manager ("PassNook", "the App") is an Android application developed by Krepel Studio ("we", "us", or "our"). This Privacy Policy explains how PassNook accesses, stores, uses, protects, and, in specific user-initiated situations, transfers information.
Application package: com.krepelstudio.passnook
Contact: Krepelstudio@gmail.com
Developer website: https://krepelstudio.com/
PassNook is designed as a local-first, encrypted credential manager. You do not need to create a PassNook account to use it. Your vault is stored on your Android device rather than on servers operated by Krepel Studio. We do not provide automatic cloud synchronization or automatic Google Drive backup of your vault.
We do not sell your passwords or other vault contents. PassNook does not include advertising, AdMob, or advertising-tracking functionality. The features described below may involve specific connections to Google Play, websites, other applications, or storage providers when you choose to use them.
Depending on the features you use, PassNook may locally process and store:
Password records: titles, usernames or email addresses, passwords, website addresses, notes, favorites, and folder assignments.
Application associations: the identity of an Android app you choose to link to a record, such as its package name, name, icon, and information needed to verify its signing identity.
Other secrets: Wi-Fi network names (SSIDs), Wi-Fi passwords, API keys, recovery keys, backup codes, and related descriptions.
Passkeys: credentials created and managed through supported Android credential-provider functions, including relying-party identifiers, credential identifiers, and protected cryptographic key material. Private passkey keys are not shown as ordinary text passwords.
Organization and preferences: folders, custom icons, colors, deleted-item status, language, theme, security choices, and other local settings.
Selected images: a custom avatar or icon that you explicitly choose through Android's system image picker.
These items are used to provide the features you request. Vault contents are stored in encrypted form on your device. Krepel Studio does not operate a server that receives or stores your vault's passwords, Wi-Fi passwords, API secrets, or private passkey keys.
If you enable PassNook as a password or credential provider in Android settings, Android may pass it relevant sign-in requests from supported applications and websites. PassNook uses those requests to identify appropriate locally stored credentials.
When you select or approve a credential, PassNook may supply the required username, password, or passkey authentication response to the application or website you are signing in to, through Android's authorized credential and autofill mechanisms. The receiving application or website handles that information under its own privacy practices. PassNook does not send your entire vault to those destinations.
On compatible Android versions, passkey creation and sign-in may involve sharing a public key, credential identifier, and cryptographic authentication response with the relevant website or application. The private passkey key is not sent to the relying party. Availability depends on the Android version and the receiving service.
Selecting an installed application to associate with a password requires limited access to information about available applications on your device. PassNook uses this information locally for your selection and to verify the intended autofill destination; it does not upload your installed-app list to Krepel Studio.
If you enter a website address, PassNook can offer to retrieve that site's icon (favicon). This network request occurs only after you choose to permit it.
A direct HTTPS connection to the relevant website may reveal your IP address and standard connection information to that website or its infrastructure. PassNook does not include your saved username, password, notes, or other vault secrets in favicon requests. If you do not allow icon retrieval, the App can display a local placeholder instead.
Ordinary vault management, password generation, local search, and local record organization do not require an internet connection.
You may choose files to import or locations in which to save exported files using Android's system file picker. PassNook accesses the specific files you select, rather than requesting unrestricted access to your device's storage.
The App supports the following user-initiated export options:
Encrypted PassNook backup (.passnook): a password-protected backup intended for restoring supported vault contents, including active and deleted entries and their organization. Supported passkey material is included only where it can be backed up securely.
Readable text file (.txt): an export of active textual entries in human-readable form. This file is not encrypted and may expose usernames, passwords, Wi-Fi passwords, and other secrets to anyone who obtains it. Private passkey key material is not exported as plain text.
Password-protected ZIP archive (.zip): an archive containing an encrypted PassNook backup and a readable text export. The archive is encrypted, but the text file becomes readable once it is extracted; use a strong archive password.
CSV import and password-protected backup restoration are performed locally. The App does not automatically upload imported or exported content to Krepel Studio.
You choose where files are saved. If you select a cloud-storage provider, messaging application, or another third-party destination through Android, that provider may receive and retain the file you choose to send or save, subject to its own privacy policy. An exported file remains your responsibility after it leaves PassNook's private storage.
PassNook uses local encryption and Android security mechanisms, including Android Keystore, to protect stored credentials. The vault remains encrypted on disk even when the optional in-app lock is disabled.
You can choose to enable an additional in-app lock and, where supported, biometric authentication through Android's system authentication interface. PassNook and Krepel Studio do not receive or store your fingerprint or face templates. Android handles biometric verification and returns an authentication result.
The App may also apply system protections to sensitive screens and use Android's safeguards for credential-provider requests. No security measure can guarantee absolute protection against every compromised device, malicious application, insecure keyboard, or misuse of exported files.
If you copy a password or secret, the value is placed on the Android clipboard at your request. Clipboard content may be accessible to the operating system or other components according to your Android version and device configuration. Avoid copying secrets unless needed.
PassNook offers an optional, one-time Lifetime Pro purchase through Google Play Billing. Google processes the purchase and payment under its own terms and privacy policy. Krepel Studio does not receive your full payment card details through PassNook.
The App may receive and locally process the purchase status and relevant purchase identifiers necessary to activate and restore Lifetime Pro. These purchase details are used for entitlement management, not advertising.
For information about Google's data handling, see: https://policies.google.com/privacy
PassNook uses only access relevant to its features, which may include:
Internet: for optional website-icon downloads and Google Play purchase-related functionality.
Biometric authentication: for optional authentication when enabled and for applicable secure passkey operations; the Android system manages biometric data.
Android Autofill and Credential Provider: available only through supported Android system mechanisms and the user's selection or authorization.
System photo and document pickers: access to a specific avatar, import file, backup, or export destination that you choose.
Limited installed-application visibility: to let you select an application to associate with a stored credential.
Screen and overlay protection / optional haptic feedback: where supported, to protect sensitive interactions and respect your vibration preference.
PassNook does not require access to your contacts, SMS messages, call history, microphone, camera, precise location, or entire photo library for these features. It does not use an Accessibility Service to read other apps' screens.
PassNook does not include advertising SDKs or sell user information to advertisers. It is not designed to send vault contents to a Krepel Studio cloud service.
The limited data transfers associated with features you choose are described above: credential responses to selected apps or websites, optional favicon requests, purchases handled by Google Play, and files shared with destinations you select. Android and Google Play may separately process information necessary to provide their platform services.
If you contact us by email, we receive the information you voluntarily include in your message and may use it to respond to your inquiry. Please do not email us passwords, backup passwords, private passkey keys, or unencrypted vault exports.
Vault data remains on your device until you choose to change or delete it, or until the App's local storage is removed. Deleting an active record moves it to Deleted Items, where you can restore it or permanently delete it. There is no automatic scheduled deletion of items in Deleted Items.
Permanent deletion removes the record from the active local vault. Because of the way flash storage and independent backups work, PassNook cannot guarantee physical overwriting of every former storage block or deletion of copies exported outside the App.
You can control your locally stored information by viewing, editing, exporting, restoring, or permanently deleting records and by clearing the App's data or uninstalling it. Clearing app data or uninstalling may make locally encrypted information unrecoverable if you have not kept a valid backup. Manual backup and export files are not automatically deleted when you uninstall PassNook.
Permanently removing a passkey from PassNook does not necessarily remove the corresponding passkey registration from the external website or account; you may need to manage that registration separately.
Because we do not operate user vault accounts or store vault data on our servers, we cannot retrieve, reset, or remotely erase your local secrets. For privacy questions or requests concerning information you sent directly to Krepel Studio, contact us at the email address below.
PassNook is a general-purpose credential-management utility and is not specifically directed at children under 13. We do not knowingly solicit children's personal information through an in-app account or advertising system.
We may update this Privacy Policy if the App's features, technical integrations, or legal requirements change. We will revise the "Last updated" date when changes are made. The current version will be available through the App's Privacy Policy link.
Developer: Krepel Studio
Application: PassNook: Password Manager
Package name: com.krepelstudio.passnook
Email: Krepelstudio@gmail.com
Website: https://krepelstudio.com/
For any questions about this Privacy Policy or PassNook's data-handling practices, please email Krepelstudio@gmail.com.