Privacy Policy for PassShield

Welcome to PassShield (hereinafter referred to as "the App"). This Privacy Policy explains how we handle your information and your privacy rights. We are committed to protecting your privacy with the core principles of "fully local, zero data upload, and end-to-end encryption".

1. Information We Collect

PassShield does not collect, store, upload, or share any of your personal identifiable information, account passwords, usage data, or other sensitive information with any third parties. All data you create in the App, including accounts, passwords, and notes, is stored only in the local app sandbox on your device and will never leave your device.

2. Data Storage & Security

1. Local Storage Commitment

All password entries and settings you create are stored exclusively in the local app sandbox on your device. The App:

Does not use any cloud sync services (including but not limited to iCloud or third-party cloud storage)
Does not initiate any network requests
Will not upload your data to any external server

2. Encryption Protection

Master Password Security: Your master password is never stored in plaintext in the App files. A random salt value is stored in the system Keychain, and a verification ciphertext derived from the key is used to verify your password. The master password itself is never stored.
Entry Encryption: All your password entries are encrypted using the AES-GCM algorithm (implemented via Apple CryptoKit). The encryption key is derived from your master password using the PBKDF2-HMAC-SHA256 algorithm with no less than 100,000 iterations. Data cannot be decrypted without your master password.

3. Clipboard Security

The App provides copy functions for accounts and passwords, with automatic clipboard clearing. You can customize the clear duration to reduce the risk of data leakage.

3. Third-Party Services

The App does not integrate any third-party SDKs, analytics tools, advertising services, or network services. No information about you will be shared with any third parties.

4. Children's Privacy

The App is designed for users of all ages. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the information below, and we will promptly delete such information.