Overview
ZeroPassVault is an offline password manager for Android. It stores your passwords, payment cards, secure notes, and two-factor (TOTP) codes — all encrypted on your device. It has no cloud service and no account: your vault never leaves your phone unless you deliberately export an encrypted backup.
No Data Collection, No Servers
ZeroPassVault does not collect, transmit, or sell any of your information.
We operate no servers and no cloud. Your vault is not uploaded anywhere, there is no account to create, and there is no analytics or crash-reporting service in the app. Your data cannot be seen by us because it never reaches us.
The app requests the INTERNET permission for one reason only: to
communicate with Google Play for the optional Pro purchase (see below). It makes
no other network connections and sends none of your vault data anywhere.
How Your Vault Is Protected
- Encrypted on your device. Every sensitive value — passwords, card details, notes, and TOTP secrets — is encrypted before it is stored, using a key held in your device’s hardware-backed Android Keystore. The key never leaves the Keystore and is never transmitted.
- App lock. Access to the app is protected by biometric unlock (fingerprint or face) or your device credential, so your vault stays locked when you’re away.
- Nothing readable at rest. The stored data is ciphertext; without the device’s Keystore key it cannot be read.
Autofill
If you enable ZeroPassVault as your autofill service, it can fill saved credentials into apps and websites for you. This matching and filling happens entirely on your device — your credentials are provided directly to the app or page you choose to fill, and are never sent to us or to any third party.
Backups and Export — You Are in Control
ZeroPassVault can create backups so you don’t lose your vault, and can import data from other managers.
- You choose the destination. When you export or set up auto-backup, you pick the file or folder location yourself. The app writes the backup there; it never uploads it to us or to any server. If you choose a location that you have synced to your own cloud storage, that is your choice and under your control.
- Backups are encrypted with your passphrase. Exported backups are sealed with a passphrase that you choose and that only you know, so a backup file is unreadable without it.
- Keep your passphrase safe. Because there is no server and no account, a backup passphrase cannot be recovered or reset by us. If you lose it, that backup cannot be decrypted.
- CSV import. You can import credentials from a CSV file you provide (for example, exported from another password manager). That file is your own; handle and delete it securely, as CSV exports are not encrypted by their nature.
Purchases and the Pro Upgrade
ZeroPassVault offers an optional Pro subscription (monthly or yearly) that unlocks additional features. The app is fully usable without it.
- All payments are processed by Google Play. ZeroPassVault never sees, receives, or stores your payment details. Your transaction is handled by Google, and Google’s Privacy Policy applies to the payment information you provide to Google.
- Subscriptions renew automatically until cancelled. You can manage or cancel them, and request refunds, through the Google Play Store → Subscriptions.
- The app stores only a local flag recording whether Pro is active. There is no server involved in checking your entitlement beyond Google Play.
What We Never Do
- Upload, sync, or transmit your vault
- Store your data on any server or cloud that we operate
- Create an account or require sign-in
- Collect analytics, usage data, or crash reports
- Share or sell any information
- Show ads
Data Deletion
Your data lives only on your device, so you control it completely:
- Delete individual items inside the app at any time.
- Clear app data in Android Settings → Apps → ZeroPassVault → Storage → Clear data, which erases the vault from the device.
- Uninstalling the app removes all of its data.
Because your vault is bound to your device and we hold no copy, clearing data, uninstalling, or losing/resetting the device will erase the vault permanently unless you have made a backup. Please keep an encrypted backup.
Permissions
- Autofill service (
BIND_AUTOFILL_SERVICE) — lets the app offer to fill saved credentials, only when you enable it and only into the app or page you choose. Optional. - Internet (
INTERNET) — used solely to complete Pro purchases through Google Play. No vault data is ever sent over the network.
Children
ZeroPassVault is a utility not directed at children under 13 and collects no data from users of any age.
Changes to This Policy
We may update this policy occasionally; the date above reflects the most recent change. If a future version adds any data collection or network features, this policy will be updated before that version ships, and the change noted in the app’s release notes.
Contact
Privacy questions or requests: [email protected]