PESystems LLC · Android

The Password Locker

Privacy Policy

The Password Locker · PESystems LLC · Effective August 17, 2026

1. Who we are

The Password Locker is developed and published by PESystems LLC. This policy explains how the app handles information. It applies to the mobile application only.

2. Information we collect

We collect nothing. We do not collect personal information, usage data, device identifiers, advertising identifiers, diagnostics, crash logs, or location. We do not use cookies, tracking pixels, advertising networks, or third-party analytics software of any kind. No information about you or your use of the app is transmitted to PESystems LLC or to anyone else.

Because we never receive your data, we also never sell it, share it, rent it, or disclose it — including to law enforcement, because we hold nothing that could be disclosed.

3. What is stored on your device

Everything you enter into the app is stored only in the app's private storage on your device, in an encrypted database that other apps cannot read. This includes your account entries, folder names, notes, and settings.

Your vault is protected with AES-256-GCM authenticated encryption. Your master password is never stored anywhere, in any form. It is used to derive a key with PBKDF2-HMAC-SHA256 (600,000 iterations by default, using a unique 32-byte random salt), and that key unwraps the random 256-bit key that actually protects your records. If you forget your master password and have not created a recovery key, neither we nor anyone else can recover your vault.

4. Permissions

The app requests exactly one permission:

• USE_BIOMETRIC — used only to offer fingerprint or face unlock as a convenience. This is optional and off until you enable it.

The app explicitly removes the INTERNET permission from its manifest, and does not request storage, contacts, camera, microphone, location, phone, or advertising permissions.

5. Biometric unlock

If you enable biometric unlock, authentication is handled entirely by your device's operating system through the standard Android biometric framework. Your fingerprint or face data is stored in secure hardware managed by your device, is never made available to the app, and is never seen, collected, or stored by PESystems LLC. The app only receives a yes-or-no confirmation from the operating system.

6. Clipboard

When you copy a password or recovery key, the app places it on your device clipboard so you can paste it, and automatically clears it approximately one minute later. Be aware that while an item is on the clipboard, other apps on your device may be able to read it. This is a limitation of the mobile operating system, not of this app.

7. Backups you create

The app keeps recent automatic backups inside its own private storage on your device. These are encrypted with the same protection as your vault, are never uploaded anywhere, and are deleted when you uninstall the app.

You may also choose to create a portable encrypted backup file and send it somewhere using your device's share sheet — for example to your Downloads folder, a cloud drive, or another device. That file remains encrypted and still requires your master password (or the recovery key that was active when it was created) to open. However, once you place that file somewhere, its safekeeping is your responsibility, and any service you send it to is governed by that service's own privacy policy, not this one. We recommend storing backups somewhere only you control.

8. Google Play

The app is distributed through the Google Play Store. Google independently collects information related to app downloads, installations, and optional crash reporting under Google's Privacy Policy. That collection is performed by Google, not by this app, and we do not control it. We receive only aggregate, anonymous install statistics from Google — nothing that identifies you or reveals anything about your vault.

9. Children

The Password Locker is a general-purpose utility and is not directed at children under 13. Because we collect no information from anyone, we do not knowingly collect information from children.

10. Retention and deletion

We hold no data about you, so there is nothing for us to retain or delete on your behalf. Your data lives on your device and is under your control at all times.

To erase everything, uninstall the app. Uninstalling removes the encrypted vault and all automatic backups stored on the device. Any portable backup files you exported and saved elsewhere are not affected by uninstalling and must be deleted by you.

11. Security

In addition to encryption at rest, the app locks itself automatically after a period of inactivity and requests that the operating system block screenshots and screen recording of its contents. Android's own cloud backup of app data is disabled, so your vault is not copied to Google's servers by the operating system.

No security measure is perfect, and the security of your vault also depends on the strength of your master password and the security of your device itself. Choose a long, memorable master password and keep your device updated and locked.

12. Changes to this policy

If this policy changes, we will post the revised version on this page and update the effective date above. Material changes will also be noted in the app's release notes on Google Play.

13. Contact

Questions about this policy or the app's privacy practices can be sent to ecklerpa@pesystemsllc.com.

PESystems LLC