01Summary
PassNote collects nothing. There are no servers, no accounts and no internet access, so there is nowhere for your information to be sent.
The app does not ask Android for internet access at all. That is not a policy commitment we could quietly change — it is a restriction the operating system enforces on the app.
Everything you enter is encrypted and stored on your own phone, and the keys that unlock it are held by your phone rather than by us.
There is no cloud backup. Uninstalling the app destroys the vault permanently, and nobody — including us — can recover it.
02Data safety at a glance
These are the same answers declared in the Google Play Console "Data safety" form for this app.
- Data collected by us
- No data collected by the developer
- Data shared
- No data shared by the developer
- Encryption in transit
- Everything is encrypted on your device; nothing is transmitted at all
- Can you delete your data
- Yes — delete an entry, clear the app’s data, or uninstall to destroy the vault
03Other companies involved
Every outside company this app relies on, what it does for the app, and what it can see.
No other company is involved at all. This app has no advertising, no analytics, no crash reporting and nothing that tracks you. Nothing about you is shared with anyone, because nothing is collected in the first place.
04Information we collect
None. We do not collect personal information, usage data, analytics, crash reports or device identifiers. There is no advertising anywhere in the app. We run no servers and keep no database, so there is nowhere for your information to go.
05The app has no internet access
PassNote does not ask Android for permission to use the internet. This matters more than a promise would: an app can only reach the network if it declares that it needs to, and Android holds it to that. Since PassNote never declares it, the app is technically incapable of sending your data anywhere — to us or to anyone else.
06What stays on your phone
The following is stored only on your device, and only because you put it there:
- Your entries
- Platform name, label, username, email, password, PIN, mPIN, three security questions and answers, notes, and the colour you gave the card.
- When each entry changed
- The date an entry was created and the date it was last edited.
- Your theme preference
- Whether you chose light, dark or the system setting.
07How that is protected
- The entire vault is encrypted with AES-256. On disk it is indistinguishable from random noise.
- Passwords, PINs and security answers are encrypted a second time, independently, before they are written into that vault.
- The encryption keys are generated on your phone and held by its secure hardware where the device provides it. They never leave the phone and the app cannot export them.
- Screenshots, screen recording and the app’s preview in the recent-apps switcher are blocked.
- Android’s own backup is switched off for this app, so your vault is never copied into a cloud backup.
08Permissions
The app requests no runtime permissions at all — no internet, no location, no contacts, no camera, no microphone.
Unlocking uses your fingerprint, face or device PIN. Android performs that check itself and tells the app only whether it succeeded. The app never sees your fingerprint, your face data or your PIN.
09The clipboard
When you copy a value it goes to your phone’s clipboard so you can paste it elsewhere. The app marks it sensitive, so Android keeps it out of the clipboard preview, and schedules it to be cleared thirty seconds later.
Two limits are worth knowing. The clearing is done by the app, so if the app is closed or stopped by the system first, the value may stay on the clipboard. And while it is there, other apps on your phone may be able to read it — that is how Android works, and it is true of every app. Paste promptly, and treat the clipboard as temporary.
10Exporting a PDF
If you export, the app writes a PDF encrypted with AES-256 using a password you choose, and saves it to your Downloads folder. From that point the file is yours to look after. We never receive the file or the password, so if it is shared, or the password is weak or forgotten, we cannot help.
11Keeping and deleting your data
Your data stays on your phone until you delete an entry, clear the app’s data, or uninstall it. Uninstalling destroys the vault and its encryption keys.
Because no copy exists anywhere else, that deletion is final. If you lose your phone or reset it, the vault cannot be recovered by us or by anyone. Use the encrypted PDF export if you want a backup.
12Your rights and choices
Most privacy policies use this section to explain how to ask a company for a copy of your data, or to have it corrected or erased. Here there is nothing to ask for: we never receive any of it. Everything is already in your hands, and these are the controls you have:
- Delete any entry from the vault at any time.
- Clear the app’s data from Android Settings, or uninstall it, to destroy the whole vault and its keys.
- Export an encrypted PDF and keep your own backup, since we hold none for you.
- Deny the fingerprint prompt — the vault still opens with your device PIN.
- Stop using the app entirely: there is no account to close and nothing left behind on any server.
13Children
The app is not directed at children, and it collects no information from anyone at all — children included.
14Other companies
There are none. No advertising networks, no analytics providers, no tracking of any kind. The app is built on open-source components that run entirely on your phone and transmit nothing.
15Changes to this policy
If this policy changes, the updated version is published here with a new date at the top and included in the corresponding release of the app.
16Contact
If you have any questions about this privacy policy, or about how PassNote handles information, contact us and we will respond.
- Publisher
- Fly Infinity