The short version: Passcard Store is a 100% offline app. We do not collect, store, transmit, sell, or share any of your personal information. Your passwords and cards never leave your device.
1. Who we are
Passcard Store ("the app", "we", "us") is a free, open-source password and card manager for Android, developed by mohdrafey1. This Privacy Policy explains how the app handles information. By using the app you agree to this policy.
2. Information we collect
We do not collect any personal data. The app has no user accounts, no registration, and no analytics. We never see, receive, or have access to anything you store in the app.
The information you enter and that stays only on your device includes:
- Password entries (titles, websites, usernames, emails, passwords, notes, categories)
- Card entries (cardholder name, card number, expiry, CVV, nickname, notes)
- App settings (PIN length, biometric preference, auto-lock and clipboard timers)
All of this is stored locally on your device only. It is never uploaded to us or to any third party.
3. How your data is stored and secured
- Sensitive data (passwords, full card numbers, CVVs) is encrypted with AES-256 and stored in a local database on your device.
- The encryption key is protected by a key derived from your PIN and is only held in memory while the app is unlocked.
- Your PIN is never stored in plain text — only a salted PBKDF2 hash is kept, in the device's secure storage (Android Keystore).
-
Backups you create (
.vaultxfiles) are encrypted with AES-256 using your PIN. CSV exports are not encrypted — you control where those files go.
Because everything is stored only on your device with no cloud copy, we cannot recover your data or PIN if you lose your device or forget your PIN. Please keep a backup.
4. Permissions we use
| Permission | Why it is used |
|---|---|
| Biometric / Fingerprint | To let you unlock the vault with your fingerprint or face, if you enable it. Biometric data is handled entirely by your device's operating system and is never accessed by the app. |
| Files (document picker) | Only when you choose to import a CSV or restore a backup file that you select. |
| Sharing | Only when you tap "share" or "export" to send a file through your device's share sheet. |
5. Network & third-party services
The app is designed to work offline and does not send your vault data over the network. The only network activity is:
- App updates. The app may check for over-the-air updates through Expo's update service (EAS Update) so you receive improvements and fixes. This checks for a new app version only; it does not transmit any of your personal or vault data.
- Distribution. The app is distributed through the Google Play Store, which is governed by Google's Privacy Policy.
The app contains no advertising, no third-party trackers, and no analytics SDKs.
6. Data sharing
We do not share, sell, rent, or disclose your information to anyone, because we never have it in the first place. Any sharing of your data happens only when you explicitly use the export or share features to send a file yourself.
7. Children's privacy
The app does not knowingly collect any information from anyone, including children under the age of 13. Since no data is collected or transmitted, there is no children's data to process.
8. Your rights and data deletion
You are always in full control of your data. You can view, edit, or delete any entry at any time inside the app. To remove everything:
- Open Settings → Delete All Data to permanently erase the vault, or
- Uninstall the app, which removes all locally stored data.
See the Contact & Data Deletion page for full details.
9. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date. Continued use of the app after changes means you accept the revised policy.
10. Contact us
If you have any questions about this Privacy Policy, contact us at: