1. Overview

Passwords Max is a privacy-first password manager for iOS devices (iPhone and iPad). This privacy policy explains how we handle your information — or more accurately, how we don't handle it, because we never access, collect, or transmit your data.

2. Data Collection

2.1 What We Collect

Nothing. We do not collect, store, or transmit any personal information, usage data, analytics, or telemetry from Passwords Max.

2.2 What We Don't Collect

• Personal identification information
• Passwords or credentials (these never leave your device)
• Usage statistics or analytics
• Device information
• Crash reports
• Location data
• Cookies or tracking data
• Any other information whatsoever

3. How Your Data is Stored

All passwords, credentials, and 2FA codes you store in Passwords Max are encrypted using military-grade AES-256 encryption and stored exclusively in your device's iOS Keychain.

3.1 Local Storage Only

• Device-Only Storage: All data remains on your iPhone or iPad
• iOS Keychain: Apple's secure, encrypted storage system
• No Cloud Sync: Your data is never transmitted to any server
• No Backups: We don't create or store backups of your data

3.2 Your Control

You have complete control over your data. You can:

• Export your passwords at any time
• Delete all data from the app
• Delete the app to remove all stored information

4. Permissions and Access

Passwords Max requests the following iOS permissions for functionality. These permissions are used locally on your device only:

4.1 Face ID / Touch ID

Purpose: To authenticate and unlock your password vault using biometric authentication.

Privacy: Biometric data is processed entirely by iOS and never accessed by Passwords Max. We only receive a yes/no response from iOS.

4.2 Camera Access

Purpose: To scan QR codes when setting up 2FA/TOTP authenticator codes.

Privacy: Camera access is only used when you explicitly scan a QR code. No images are saved, stored, or transmitted. QR code data is processed locally on your device.

4.3 Keychain Access

Purpose: To securely store your encrypted passwords using iOS Keychain.

Privacy: Data is encrypted by iOS and accessible only to Passwords Max on your device.

5. Third-Party Services

Passwords Max does not integrate with, use, or connect to any third-party services, analytics platforms, advertising networks, or external servers.

No third parties have access to your data because no data leaves your device.

6. Data Security

• AES-256 Encryption: Military-grade encryption for all stored passwords
• Biometric Protection: Vault locked behind Face ID or Touch ID
• Auto-Lock: Automatic locking after customizable timeout period
• No Network Access: App functions entirely offline
• Secure Keychain: Apple's battle-tested secure storage system

7. Children's Privacy

Passwords Max does not collect any data from anyone, including children under the age of 13. The app is suitable for all ages, though we recommend parental guidance for young users.

8. Changes to Privacy Policy

We may update this privacy policy from time to time. Any changes will be reflected in the "Last Updated" date at the top of this policy. Continued use of Passwords Max after changes constitutes acceptance of the updated policy.

However, our core principle will never change: we will never collect, access, or transmit your data.

9. Your Rights

Since we don't collect any data, there is no data to:

• Access
• Rectify
• Delete
• Export (beyond your own export feature)
• Restrict processing of

Your data belongs to you and stays with you on your device at all times.

10. International Users

Passwords Max is available worldwide. Since all data is stored locally on your device and never transmitted, there are no international data transfer concerns. Your data never crosses any borders because it never leaves your device.

11. Compliance

Our privacy-first approach means we are compliant with:

• GDPR (General Data Protection Regulation - EU)
• CCPA (California Consumer Privacy Act - USA)
• COPPA (Children's Online Privacy Protection Act - USA)
• Other privacy regulations worldwide

Compliance is simple when you don't collect any data.

12. Security Audits

We welcome security researchers and auditors to review Passwords Max. Since we don't collect data, there are no servers to audit — only the app's local functionality.