Privacy Policy

1. Introduction

PassForge ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our password generator and manager application collects, uses, and safeguards your information when you use our mobile application.

2. Information We Collect

2.1 Information Stored Locally on Your Device

The following data is stored securely on your device and never transmitted to our servers:

• Password Vault Data: All passwords you save, including titles, usernames, passwords, websites, categories, and notes
• Password Generation History: Your last generated password (temporarily stored in memory only)
• Application State: Current password generation settings during app session

2.2 Technical Information

Our app may collect limited technical information for functionality purposes:

• Device Information: Device type, operating system version for compatibility
• Network Status: Internet connectivity status for ad loading (when applicable)
• App Performance: Crash reports and error logs to improve app stability

2.3 Advertising Data

PassForge displays advertisements through Google Mobile Ads. The following may be collected by advertising partners:

• Advertising ID for personalized ads
• General location data (country/region level)
• App interaction data for ad performance measurement

3. Data Storage and Security

3.1 Local Storage Security

All sensitive data is protected using industry-standard security measures:

• Encryption: All passwords and sensitive data are encrypted using Flutter Secure Storage with AES-256 encryption
• Local-Only Storage: No passwords or personal data are transmitted to external servers
• Secure Key Management: Encryption keys are managed securely by the device's secure enclave
• Temporary Data: Generated passwords exist only in memory until explicitly saved

3.2 Data Categories and Protection Levels

4. How We Use Your Information

4.1 Primary Functions

• Password Generation: Creating secure passwords and passphrases based on your specified criteria
• Password Storage: Securely storing your passwords in an encrypted vault with categories
• Password Management: Editing, deleting, and organizing saved passwords
• Search and Filter: Finding passwords by title, username, website, or category
• Data Export: Sharing passwords through system sharing capabilities

4.2 Additional Features

• Password Analysis: Evaluating password strength and security
• Clipboard Management: Copying passwords and generated content
• QR Code Generation: Creating QR codes for password sharing
• Network Connectivity: Checking internet status for ad loading

5. Data Sharing and Third Parties

5.1 No Data Sharing

We do not sell, trade, or transfer your personal information or passwords to third parties. Your password vault data remains exclusively on your device.

5.2 Third-Party Services

PassForge integrates with the following third-party services:

• Google Mobile Ads: For displaying advertisements (subject to Google's privacy policy)
• Flutter Framework: For app development and functionality
• Device Security Services: For biometric authentication and secure storage

5.3 Advertising Partners

Google AdMob may collect and process data for advertising purposes according to their privacy policy. You can opt out of personalized advertising through your device settings.

6. Permissions and Device Access

6.1 Required Permissions

• Internet Access: For loading advertisements and checking connectivity
• Network State: To determine internet availability for ad functionality
• Storage Access: For local data persistence using secure storage
• Advertising ID: For Google Mobile Ads functionality

6.2 Optional Features

• Clipboard Access: For copying passwords and generated content to system clipboard
• Share Functionality: For sharing passwords securely through system sharing
• QR Code Generation: For creating QR codes of generated passwords

7. Data Retention and Deletion

7.1 Data Retention

• Password vault data is retained until you manually delete it or uninstall the app
• Generated passwords are not stored unless explicitly saved to the vault
• Temporary clipboard data is cleared based on system settings
• No user preferences or settings are persistently stored
• Password generation settings reset to defaults each app session

7.2 Data Deletion

• Individual Passwords: Can be deleted individually from the vault through the app interface
• Generated Passwords: Automatically cleared when new passwords are generated
• Complete Data Wipe: All data is permanently removed upon app uninstallation
• Clipboard Data: Automatically managed by the operating system

8. Children's Privacy

PassForge is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Security Measures

9.1 Technical Safeguards

• End-to-end encryption for all sensitive data
• Secure key derivation and storage
• Protection against common security vulnerabilities
• Regular security updates and patches

9.2 User Responsibilities

• Keep your device secure with lock screen protection
• Regularly update the application to receive security improvements
• Do not share device access with unauthorized users
• Be cautious when using clipboard features in public or shared environments
• Verify website URLs before saving passwords to avoid phishing

10. International Data Transfers

Since all password data is stored locally on your device, there are no international data transfers of your sensitive information. Advertising data may be processed by Google in various locations subject to their privacy policy.

11. Your Rights and Choices

11.1 Data Control

• Access: Full access to all your stored passwords and data through the app interface
• Modification: Edit or update any saved password information
• Deletion: Remove individual password entries through the vault interface
• Export: Share password data through system sharing functionality
• Search: Search and filter your password vault by various criteria

11.2 Advertising Choices

• Opt out of personalized ads through device settings
• Limit ad tracking through privacy settings
• Reset advertising ID when needed
• Ad display is based on Google Mobile Ads policies

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes through the app or by posting the new Privacy Policy on our website. Your continued use of PassForge after any changes indicates your acceptance of the updated policy.

13. Contact Information

14. Compliance and Legal

This Privacy Policy complies with applicable privacy laws and regulations, including GDPR principles where applicable. PassForge's privacy-by-design approach ensures minimal data collection and maximum user control.

15. Disclaimer

While we implement robust security measures, no method of electronic storage is 100% secure. Users are responsible for maintaining device security and should not store passwords on compromised devices.