Privacy Policy

1. Zero Data Collection

Keypass One operates on a strict zero-knowledge model. All 2-way 2FA authentication keys and generated time-based one-time passwords (TOTP) remain locally encrypted on your physical device.

We do not own, operate, or connect to any remote servers for cloud syncing, account management, telemetry, or analytics. Your identity and secret tokens never cross any network controlled by us.

2. Camera & Hardware Permissions

To provide core authenticator features, Keypass One accesses your device's camera strictly on an as-needed basis:

• On-Demand QR Scanning: Camera permission is requested solely when you actively initiate a QR code scan to add 2FA accounts or complete a peer-to-peer verification handshake. Camera permission is not active at any other time.
• Local Processing Only: All video frames captured during QR code scanning are processed locally in real-time within your device's temporary memory. Images, video feeds, or scanned metadata are never saved to disk or transmitted off your device.

3. Local Data Security & Storage

Your secrets and cryptographic keys are saved strictly using your operating system's native hardware-backed secure storage (such as the iOS Keychain or Android Keystore/EncryptedSharedPreferences). Because we have zero access to your device, we cannot view, recover, backup, or reset your keys if your device is lost or compromised.

4. Third-Party Analytics and SDKs

We do not integrate any third-party software development kits (SDKs), advertising networks, tracking pixels, crash-reporting frameworks (e.g., Firebase, Sentry), or analytics services. No passive data collection occurs while using the app.

5. Children’s Privacy

Because Keypass One does not collect personal information from any user under any circumstance, our Service fully complies with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and all international privacy statutes regarding minors.

6. Policy Updates

We may update our Privacy Policy periodically to maintain compliance with application store regulations. However, our fundamental commitment to local-only, zero-server privacy will never change. Any updates will be reflected directly on this page with an updated effective date.