Privacy Policy for LocalPass

Last Updated: June 2026

1. Introduction

Welcome to LocalPass. This Privacy Policy outlines how your information is handled by our offline-first password manager application. We are deeply committed to your privacy and security.

2. Data Collection & Storage

Zero Data Collection: LocalPass is designed with a "zero-knowledge" offline-first architecture. This means we do not collect, store, or transmit your passwords or vault contents to our servers — we have none. All data you enter into the app is encrypted and stored exclusively on your local device. The only time your vault data leaves your device is when you explicitly create a backup (device-to-device or Google Drive), and in every case it is encrypted with AES-256-GCM beforehand, so it stays unreadable to us and to any third party, including Google.

3. Third-Party Services

Google AdMob (Advertising)

To support the development of LocalPass, we utilize Google AdMob to display advertisements within the app. AdMob may automatically collect certain device information, such as IP addresses, mobile advertising IDs (e.g., Apple IDFA or Android Advertising ID), and general location data, in order to provide personalized ads.

• You can manage or opt-out of personalized advertising by adjusting your device's tracking settings.
• For more information on how Google uses data, please visit Google's Privacy & Terms.

Firebase Analytics & Crashlytics (Diagnostics)

We use Firebase Analytics and Firebase Crashlytics (provided by Google) to collect anonymous crash reports and aggregate usage statistics. This data helps us identify and fix bugs, and understand how the app is being used in general terms.

• What is collected: app crash stack traces, device model, OS version, session counts, and app version. No passwords, credentials, or personally identifiable information are ever included.
• What is NOT collected: your vault data, master password, stored passwords, usernames, or any content you enter into the app.
• Data is transmitted to Google's servers only when your device has an active internet connection. The app functions fully offline regardless.
• For more information, see Firebase Privacy & Security.

Google Drive (Optional Cloud Backup)

LocalPass lets you optionally back up your vault to your own Google Drive. This feature is entirely manual and is never performed automatically — nothing is uploaded unless you choose to.

• What is stored: only an encrypted backup file (AES-256-GCM). It is placed in Drive's hidden, app-specific "App Data" folder tied to your Google account — this folder is not visible in your normal Drive and is not shared with anyone.
• What we can see: nothing. The backup is encrypted on your device before it is uploaded, so neither we nor Google can read its contents.
• Access scope: LocalPass requests access only to its own App Data folder. It cannot see, read, or modify any other files in your Google Drive.
• You can view and delete your cloud backups at any time from within the app, or revoke the app's access from your Google Account permissions.

4. Data Sharing via P2P

If you use the built-in P2P sharing feature (via Wi-Fi), your data is securely encrypted before being transmitted directly to the receiving device. This process occurs strictly between the participating devices on the same local network; no external servers or third-party intermediaries are involved.

5. Security

We use industry-standard AES-256 encryption within the app to protect your vault. The master key required to decrypt your data remains solely in your possession and is never logged or exported.

6. Changes to This Policy

We may update our Privacy Policy periodically. We will notify you of any changes by posting the new Privacy Policy clearly accessible from within the App and up on this web page.

7. Contact Us

If you have any questions or suggestions about our Privacy Policy, please contact the developer via the official app store support link.