PassDrop — Password Generator

Limon iT Lab

Effective Date: January 29, 2026

Last Updated: May 10, 2026

1. INTRODUCTION

This Privacy Policy governs your use of the PassDrop mobile application ("Application"), developed and maintained by Limon iT Lab ("Service Provider," "we," "our," or "us"). By downloading, installing, or using the Application, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

PassDrop is a local-first password generator and secure vault. All passwords and vault entries you store are kept exclusively on your device and are never transmitted to our servers or any third party. The Application is provided on an "AS IS" basis. Where features are offered free of charge, that free tier may be supplemented by in-app purchase options as described in Section 7 (Billing & Subscriptions) below.

If you do not agree with any part of this Privacy Policy, please discontinue use of the Application immediately.

2. INFORMATION WE COLLECT

We collect only the minimum information necessary to operate and improve the Application.

2.1 Automatically Collected Information When you use the Application, certain technical data may be collected automatically, including:

• Device identifiers (e.g., advertising ID, device model, OS version)

• Internet Protocol (IP) address

• App session duration and usage frequency

• Crash reports and diagnostic data

• General geographic region (country/region level only — not precise location)

2.2 Information You Provide We do not require account registration to use the Application. However, if you contact us for support or feedback, we may collect your name and email address solely for the purpose of responding to your inquiry.

2.3 Vault & Password Data All passwords, PINs, vault entries, and other sensitive data you create or store within PassDrop are processed and stored exclusively on your device. This data is encrypted using AES-256-GCM before being written to local storage. We have no access to this data at any time.

2.4 What We Do NOT Collect

• Vault contents, saved passwords, or any credentials you store in the app

• Precise GPS or real-time location data

• Contacts, photos, microphone, or camera data

• Biometric data (biometric authentication is handled entirely by your device's OS and hardware)

• Financial credentials or payment card details

• Sensitive personal information of any kind beyond what is described above

3. HOW WE USE YOUR INFORMATION

We use the information collected for the following purposes:

• To operate, maintain, and improve the Application and its features

• To diagnose and resolve technical errors or crashes

• To analyze aggregate, anonymized usage trends to enhance user experience

• To display relevant advertisements to non-premium users via Google AdMob

• To communicate important notices, security updates, or changes to this Policy

• To comply with applicable legal obligations

• To detect, prevent, or investigate fraudulent or unauthorized activity

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. LOCAL DATA STORAGE & ENCRYPTION

PassDrop is designed around a local-first principle. Your vault data never leaves your device unless you explicitly choose to export or share a backup file.

4.1 On-Device Vault All entries in the password vault are stored locally using Android's encrypted storage. No vault data is transmitted over the internet, synchronized to cloud servers, or accessible by Limon iT Lab.

4.2 Encrypted Backups When you create a manual or automatic backup, the Application generates an AES-256-GCM encrypted file with the .lil extension. This file is written to your device's local storage (internal files directory or Downloads/PassDrop/Backups/). You are solely responsible for managing where you store, share, or upload such backup files.

4.3 Biometric Authentication The Application supports biometric authentication (fingerprint, face unlock) to protect access to vault entries. All biometric verification is performed by your device's operating system and secure hardware enclave. Biometric data is never collected, processed, or stored by Limon iT Lab.

5. THIRD-PARTY SERVICES

The Application integrates third-party SDKs to support advertising and billing. Each of these third parties operates under its own privacy policy and data practices. We encourage you to review their respective policies:

• Google AdMob — https://policies.google.com/privacy

• Google Play Billing — https://policies.google.com/privacy

These services may collect anonymized, aggregated technical data as described in their respective policies. We do not grant these third parties access to your vault data or any personally identifiable information beyond what is technically transmitted through standard SDK operation.

PassDrop does not currently integrate Google Analytics for Firebase or Firebase Crashlytics. If this changes in a future update, this Policy will be updated accordingly.

6. DISCLOSURE OF INFORMATION

We do not disclose your personal information to any third party except in the following limited circumstances:

(a) Legal Compliance: When required by applicable law, court order, subpoena, or governmental authority.

(b) Rights Protection: To protect the rights, safety, intellectual property, or property of the Service Provider, our users, or the public.

(c) Service Providers: To trusted vendors or contractors who assist us in operating the Application, strictly under confidentiality obligations and only to the extent necessary to perform their services.

(d) Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via a prominent notice within the Application.

(e) Consent: With your explicit consent for any other purpose not listed above.

7. BILLING & SUBSCRIPTIONS

7.1 In-App Purchases The Application offers optional premium features available through auto-renewing subscriptions ("Premium"). All transactions are processed securely through the Google Play Billing system. Limon iT Lab does not directly collect, store, or process your payment card details at any point.

7.2 Subscription Plans & Terms

• PassDrop Premium is available as a monthly or yearly auto-renewing subscription.

• Subscriptions automatically renew at the end of each billing period unless cancelled at least 24 hours before the renewal date.

• Your Google Play account will be charged upon confirmation of purchase and at the start of each renewal period.

• Subscription prices are displayed clearly before purchase and may vary by region or promotional offer.

7.3 Managing & Cancelling Subscriptions You may manage or cancel your subscription at any time through: Google Play Store → Account → Subscriptions → PassDrop

Cancellation takes effect at the end of the current billing period. You will retain access to Premium features until that date. No partial refunds are issued for unused time within an active billing period, except where required by applicable law.

7.4 Refunds Refund requests are handled in accordance with Google Play's refund policy. To request a refund, please visit the Google Play Help Center or contact us at limonitlab@gmail.com within 48 hours of your purchase.

7.5 Price Changes We reserve the right to modify subscription pricing at any time. You will be notified of any price change before it takes effect, and you will have the opportunity to cancel if you do not agree with the new pricing.

7.6 Free Trial Where a free trial is offered, it will begin immediately upon subscription initiation. Any unused portion of the free trial will be forfeited upon purchase of a Premium subscription during the trial period.

8. DATA RETENTION

We retain automatically collected usage and diagnostic data only for as long as necessary to fulfill the purposes described in this Policy, or as required by law — typically no longer than 24 months.

If you contact us directly (e.g., via email), we retain that correspondence for a reasonable period to address your inquiry and for record-keeping purposes.

To request deletion of any personal data associated with your use of the Application, please contact us at limonitlab@gmail.com. We will process your request within 30 days, subject to any legal obligations that may require us to retain certain records.

Your vault data is stored only on your device and is under your complete control. Uninstalling the Application will remove all locally stored vault data permanently.

9. OPT-OUT & DATA CONTROL

9.1 Uninstalling the Application You may stop all data collection by the Application at any time by uninstalling it through your device's standard uninstall process or via the Google Play Store. Uninstalling will also permanently delete all locally stored vault data.

9.2 Advertising Preferences You may limit personalized advertising by adjusting your device's advertising settings: Android: Settings → Google → Ads → Opt out of Ads Personalization

Upgrading to PassDrop Premium removes all advertisements entirely.

10. CHILDREN'S PRIVACY

The Application is not directed to children under the age of 13, and we do not knowingly collect personally identifiable information from children under 13.

If we become aware that a child under 13 has provided personal information without verifiable parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe your child has submitted personal information through the Application, please contact us immediately at limonitlab@gmail.com.

11. SECURITY

We take the security of your information seriously and implement industry-standard technical and organizational measures to protect data from unauthorized access, disclosure, alteration, or destruction.

For your vault data specifically, PassDrop uses AES-256-GCM encryption for all backup files and relies on Android's platform-level security for on-device storage. Biometric authentication is handled exclusively by your device's hardware security module.

For data transmitted through third-party SDKs (such as AdMob), encrypted data transmission (TLS/HTTPS) is used. While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breach that may occur.

12. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy

• Notify users through a prominent in-app notice or, where appropriate, via email

Your continued use of the Application after any changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy regularly.

13. YOUR CONSENT

By downloading, installing, or using the Application, you expressly consent to the collection and use of your information as described in this Privacy Policy. If you are using the Application on behalf of a minor, you represent that you have the legal authority to provide such consent on their behalf.

14. GOVERNING LAW

This Privacy Policy shall be governed by and construed in accordance with applicable local laws. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts in the Service Provider's jurisdiction.

15. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Limon iT Lab Email: limonitlab@gmail.com

We are committed to addressing your inquiries promptly and transparently.

© 2026 Limon iT Lab. All rights reserved.