Privacy Policy

1. Information Stored in the Pass & Note App

Pass & Note allows you to store passwords, secure notes, and related vault information.

Your vault data is stored locally on your device in encrypted form.

Pass & Note does not operate a hosted vault service and does not receive or maintain a server-side copy of your passwords, secure notes, Master Password, or local vault encryption keys.

2. Master Password

Your Master Password is used to unlock and protect your vault.

Pass & Note does not receive, store, or maintain a recoverable copy of your Master Password.

Because Pass & Note does not know your Master Password, we cannot recover or reset it for you.

You are responsible for keeping your Master Password safe.

3. Biometric Authentication

Pass & Note may allow you to use device-supported biometric authentication, such as Face ID, Touch ID, or fingerprint authentication, for convenient access to your vault.

Biometric matching is performed by the operating system. Pass & Note does not receive or store your fingerprint, facial scan, or other biometric template.

Biometric authentication is a convenience feature and does not replace your Master Password.

4. Backups and Exported Files

Pass & Note allows you to create encrypted backup or export files.

These files are created for you to store and manage yourself. Pass & Note does not automatically upload or retain a copy of your exported vault files.

You are responsible for deciding where backup files are stored and for keeping both your backup files and the password required to open them safe.

If you intentionally export a note in plaintext, that exported file is no longer protected by Pass & Note's vault encryption.

5. Web Vault Reader

The Pass & Note website may allow you to open supported encrypted Pass & Note files in your browser.

Decryption is designed to occur locally in your browser using the file and password you provide.

Pass & Note does not intentionally upload your vault contents, backup password, passwords, or secure notes to a Pass & Note application server for decryption.

Do not use the web reader on a device or browser that you do not trust.

6. Analytics, Advertising and Tracking

The Pass & Note applications do not include advertising, behavioral tracking, or analytics SDKs.

Pass & Note does not sell your personal information to advertisers.

If these practices change in a future version, this Privacy Policy will be updated accordingly.

7. Website Infrastructure

The Pass & Note website is delivered using third-party internet infrastructure and hosting services.

Like most websites, infrastructure providers may process limited technical information necessary to deliver, secure, and operate the website, such as network requests, IP addresses, or related technical information according to their own privacy practices.

Pass & Note does not use this infrastructure to collect the contents of your encrypted vault for its own purposes.

8. Support Communications

If you contact Pass & Note support, we receive the information you voluntarily include in your message, such as your email address and the contents of your support request.

This information is used only as reasonably necessary to respond to your request, investigate issues, maintain the service, or comply with applicable legal obligations.

Please do not send your Master Password, vault encryption keys, backup passwords, or unencrypted passwords through support email.

9. Clipboard

When you choose to copy information from Pass & Note, that information is placed on your device's system clipboard.

Clipboard behavior is controlled partly by your operating system and device environment. Pass & Note may provide features intended to clear copied password information after a selected period, but you should still treat copied sensitive information carefully.

10. Data Retention and Deletion

Vault information stored by the mobile application remains on your device until you delete the relevant information, remove the application, reset the vault, or otherwise remove the application's local data.

Exported files remain wherever you have chosen to store them until you delete them.

Because Pass & Note does not maintain a hosted copy of your vault, we cannot remotely retrieve or delete your locally stored vault information.

For information you voluntarily send through support communications, you may contact us to request deletion where applicable.

11. Security

Pass & Note is designed to protect vault information using encryption and operating-system security features.

However, no software, device, encryption implementation, storage system, or transmission method can guarantee absolute security against every possible risk.

You are responsible for protecting your devices, Master Password, and exported backup files.

12. Third-Party Platforms

Pass & Note may be distributed through third-party platforms such as the Apple App Store and Google Play.

Those platforms may independently collect or process information according to their own privacy policies. Pass & Note does not control the privacy practices of those platforms.

13. Changes to This Privacy Policy

This Privacy Policy may be updated when Pass & Note changes its features, technology, legal requirements, or data-handling practices.

When a material update is made, the effective date or last-updated date on this page will be changed.

14. Contact

If you have questions about this Privacy Policy or Pass & Note's privacy practices, contact:

Pass & Note
Developer: Siddharth Lenka
Email: support@passandnote.com
Website: https://passandnote.com