Privacy Policy
At a Glance
- Your passwords, notes, and verification codes are stored on your devices, encrypted and without developer cloud sync.
- The App does not collect personal information: no accounts, no analytics, no ads, and no third-party SDKs.
- The app itself does not connect to the internet. Purchases and restores are handled by Apple’s system, and we can’t see your Apple Account or payment information.
- Photo and screenshot recognition happens entirely on your device. Images are never saved or uploaded.
1. Scope
This policy applies to Password Vault for iOS and watchOS (the “App”) and explains how the App handles your information. In this policy, “we” and “us” refer to the developer of the App.
The App is built on one principle: your data stays on your devices and never passes through any server of ours. We do not have, or operate, any server for storing user data. If you enable Apple Watch sync, the App also stores an encrypted copy on your paired watch as described below.
2. Information We Don’t Collect
The App does not collect, store, sell, or share any of your personal information, including but not limited to:
- any passwords, accounts, website addresses, notes, or verification codes you save;
- identity information such as your name, phone number, email address, or Apple Account;
- device identifiers, IP addresses, or location information;
- usage behavior, crash logs, or analytics data.
The App does not require you to sign up for an account, contains no ads, and uses no analytics or tracking tools. In the App Store’s “App Privacy” section, the App is labeled “Data Not Collected.”
3. Data Stored on Your Device
The following data is stored only on your device and is fully under your control:
| Data | How It’s Stored |
|---|---|
| Passwords, notes, verification code secrets | Encrypted with AES-256-GCM before being saved. The encryption key is kept in the device’s Keychain, limited to this device and readable only while the device is unlocked. It is never synced to iCloud and is never included in backups. |
| Titles, website addresses, usernames | Stored in plain text in the App’s database so they can be searched. The database is protected by iOS Data Protection and cannot be opened while the device is locked. |
| App passcode | Never stored in plain text. Only a salted verification value computed with PBKDF2-SHA256 is saved, in the Keychain. |
| Settings and usage counts | Unlock method, Auto-Lock time, subscription status, number of days used, and number of copies (used to decide when to ask for an App Store rating). These are saved in the App’s local settings and never leave your device. |
Passwords you copy can only be pasted on this device (they are not sent to your other devices through Universal Clipboard), and the system clears them automatically after 60 seconds.
4. How Device Permissions Are Used
Face ID / Touch ID
Used to unlock the App. Authentication is performed by iOS, and the App only receives a “succeeded” or “failed” result. The App cannot access your face or fingerprint data.
Camera
Used only when you choose “Scan with Camera,” to take a photo that contains an account and password. The photo is held in memory only for on-device text recognition and is released as soon as recognition finishes. It is never saved to your photo library or uploaded.
Photos (Import from Screenshots)
The App uses the system photo picker, so it can read only the images you choose and cannot access your whole photo library. These images are also recognized only on your device and are never saved or uploaded.
Network
The App’s own code makes no network requests. When you view subscription prices, make a purchase, or restore purchases, Apple’s StoreKit system component connects to the App Store. On iPhones sold in mainland China, the system may therefore ask whether to allow the App to use the network. You can choose not to allow it; all features other than purchase-related actions will continue to work.
5. Subscriptions and Purchases
Subscriptions and one-time purchases are processed by Apple through the App Store. Your Apple Account, payment method, and billing information are handled by Apple under the Apple Privacy Policy, and we have no access to them.
To determine whether you can use Pro features, the App reads the purchase receipt provided by Apple on your device (including the product type, purchase date, and expiration date) and saves your most recent subscription status locally so the App also works offline. This information is never sent to us.
6. Apple Watch Sync
When you turn on “Show Passwords on Apple Watch” on your iPhone, the App encrypts the contents of your vault with a dedicated sync key and transfers it directly between your iPhone and your paired Apple Watch using Apple’s WatchConnectivity, without passing through our servers. When the two devices aren’t near each other, the system may relay the data through Apple’s services; in that case, the data being transferred is still encrypted.
Data on your Apple Watch is also stored in encrypted form. When you turn this option off, the data and the sync key on your Apple Watch are deleted.
7. Encrypted Backups
You can export an encrypted backup file. The backup is encrypted with AES-GCM using a key derived with PBKDF2-SHA256 from the backup password you set. The backup file is saved to a location you choose (for example, the Files app, or sent via AirDrop), and we cannot access it.
Please keep your backup password safe. We cannot help you recover your backup password, and we cannot decrypt any backup file. If you save a backup to iCloud Drive or another cloud service, storage of that file is subject to that provider’s privacy policy.
8. Third Parties
The App does not integrate any third-party SDKs, advertising, analytics, or crash reporting services.
The App includes a list of common weak passwords from the open-source project SecLists (MIT License). It is used only to check the strength of your passwords on your device and involves no data transfer.
The Apple system services the App uses (Face ID, StoreKit, WatchConnectivity, text recognition, and others) are subject to the Apple Privacy Policy.
9. Deleting Your Data
- When you delete a password in the App, it moves to “Recently Deleted” and is permanently deleted after 30 days. You can also permanently delete it right away from “Recently Deleted.”
- Deleting the App also deletes the App’s database and settings. The encryption key and App passcode verification value stored in the Keychain may remain on the device for a time, but they are unusable without the database and are cleared automatically if you reinstall the App.
- To delete data on your Apple Watch, turn off “Show Passwords on Apple Watch” on your iPhone, or delete the App from your Apple Watch.
- You are responsible for deleting any backup files you have exported.
Because we don’t hold any of your data, we cannot delete, export, or recover data on your behalf.
10. Minors
The App does not collect any personal information, including information from minors. Minors under the age of 14 should use the App with the consent and guidance of a parent or guardian.
11. Your Rights
Under the Personal Information Protection Law of the People’s Republic of China and other applicable laws, you have the right to access, copy, correct, and delete your personal information. Because all of your data is stored only on your device, you can view, edit, export, and delete it directly in the App, without needing to submit a request to us.
12. Changes to This Policy
We may update this policy from time to time. The updated policy will be posted on this page, and the dates at the top will be updated. If an update significantly affects your rights, we will point it out in the App’s release notes.
13. Contact Us
For privacy questions, App support, or feedback, email morphlyivai@gmail.com. If you contact us, we receive your email address and whatever you choose to include in your message so we can respond. Please do not send passwords, verification codes, or backup files.