Privacy Policy

1. Information processed on your device

Passtree processes the information you enter or import to provide its vault features. Depending on your choices, this can include login names, email addresses, passwords, website addresses, bank-account details, payment-card details, secure notes, item titles, tags and collections.

The app also stores settings, local device and pairing identifiers, paired-device information, and records needed to synchronize changes and resolve conflicts. It processes your master password and recovery material locally to protect and unlock your vault. There is no developer-held copy of your master password, recovery key or vault decryption key.

This information is used for saving, searching, generating passwords, authentication, autofill, import/export and device synchronization. We do not receive it through normal app use.

2. Collection, advertising and tracking

The app does not send personal information, vault contents, usage analytics or automatic crash reports to the developer. It does not include advertising or analytics SDKs, access the Android Advertising ID, or sell your information. The current Android release does not include Google Play Billing or process purchases.

Google Play and your operating system may independently process installation, diagnostic or store information under their own settings and policies. Passtree does not embed a reporting SDK to send them your vault contents.

3. Direct device synchronization

If you choose to pair devices, Passtree exchanges vault data directly with your paired device over a local Wi-Fi connection or Bluetooth LE. Pairing and sync use authenticated, encrypted connections. Vault contents and cryptographic material needed by the paired devices are not routed through a Passtree server, and the developer cannot decrypt these transfers.

Local discovery exposes the network information necessary to find a nearby device. LAN advertisements use a fresh random service name rather than your personal device name or a persistent identity key. Bluetooth advertisements omit your device name. Nearby-network observers may still detect that Passtree is being used.

4. Permissions and operating-system features

• Camera: used to scan pairing QR codes. Scanning is processed on your device; the app does not upload camera images.
• Bluetooth / Nearby devices: used for direct Bluetooth device synchronization.
• Location permission on older Android versions: Android 9–11 require this permission for the app's Bluetooth functionality. Passtree does not use it to obtain geographic coordinates or track your location.
• Network access: the full Android app uses network access for direct local pairing and synchronization, rather than a hosted vault service.
• Biometrics: if enabled, Android's biometric prompt and Keystore authorize local unlocking. The app does not receive your fingerprint image or biometric templates.
• Files: the system file picker gives access to files or destinations you select for import or export. The app does not request unrestricted access to your files.

You can manage permissions in Android settings. Denying a permission can prevent its related optional feature from working.

5. Autofill, clipboard and transfers you choose

If you enable Passtree as an autofill provider, it processes information supplied by Android about the app or website being filled to find matching credentials. Credentials you select are passed through Android to the destination app or website. That destination then handles the information under its own practices.

If you copy a field, its value is placed on the operating-system clipboard. Other apps or device features with clipboard access may receive it. Optional clipboard clearing attempts to remove the copied value after 30 seconds if it has not been replaced. Operating-system and keyboard features are outside Passtree's control.

Exports go to the destination you choose through the system file picker. If you select a cloud drive or another provider, that provider may receive and store the selected file under its own terms. These transfers happen because you choose to export or fill data; the app does not automatically share your vault with advertisers or data brokers.

6. Encryption and backups

Vault item contents are protected with authenticated encryption. Master-password key derivation uses Argon2id. Some database and synchronization metadata remains necessary for local operation; this policy does not claim that every database field is encrypted.

Encrypted .dat backups use a separate backup password. JSON, YAML and CSV exports are plaintext and can be read by anyone who can access the exported file. Keep exported files and their passwords secure. Changing your master password does not change old backups.

The Android app disables platform app-data backup and excludes its data from Android backup/device-transfer mechanisms. Passtree does not create automatic cloud backups. You are responsible for creating and keeping your own backup files.

There is no developer recovery service or key escrow. If you lose both your master password and recovery key, the developer cannot unlock that vault. An existing encrypted backup can restore only its saved contents and requires its own backup password.

7. Retention and deletion

Your vault and settings remain on your device until you remove them. Individual item deletion uses deletion records for synchronization; encrypted item versions or database remnants may remain. Deleting an item is not a promise of immediate forensic erasure.

To remove the local vault, use Settings → Reset vault, or clear the app's storage in Android settings. Uninstalling removes the app's private data through Android. These actions do not erase files you exported, independent copies on paired devices, or files stored with another provider. Remove those copies separately. Flash storage and operating-system behavior can limit secure physical erasure.

Passtree has no online user account and the developer holds no server-side vault to delete. You can stop sharing with a peer by forgetting that device; this does not remotely erase the peer's existing copy.

8. Support correspondence and privacy requests

If you contact us, we receive your email address and any information you choose to include. We use it to answer your request, investigate an issue or address a legal obligation. Email providers process that correspondence as part of delivering and storing email.

We retain support correspondence only for as long as needed to resolve the request and any related security or legal obligations, then delete it. You may ask us to access, correct or delete correspondence you sent us, subject to applicable legal obligations. We cannot remotely access or delete your local vault.

Never send passwords, recovery keys, full payment-card details, exported vaults or other secrets with a support request. Redact screenshots and diagnostic details before sending them.

9. This privacy-policy website

This page uses no analytics, advertising scripts, forms, external fonts or application cookies. It does not receive your vault contents. The hosting provider, Render, may process your IP address, browser/request information and access logs to deliver and protect the website. Hosting data is separate from local vault data and is handled under Render's privacy policy and the applicable hosting configuration.

10. Children

Passtree does not use advertising or build profiles of children or other users. Its local vault design does not send a child's vault contents to the developer. If a child sends personal information in a support request, a parent or guardian can contact us to request its deletion, subject to applicable legal obligations.

11. Changes to this policy

We will update this page and its effective date when our practices change. If a future release adds purchases or changes how information leaves the device, its policy and store disclosures will be updated to reflect that behavior, with notice or consent where required.

12. Contact

Developer: Priyabrata Sarkar(DyutiWeb)
Privacy and support: dyutiweb20@gmail.com