PASS369Updated 10 October 2026
Privacy policy
About this policy
This policy covers PASS369: Passkey Vault for Android and the associated PASS369 account service, provided by 369apps.studio. Contact us at 369apps.studio@gmail.com.
What stays on your phone
Passkey private keys, site names and saved account labels are stored in an encrypted local vault. PASS369 does not upload this vault to its account server and this Android version has no cloud vault sync. Android handles biometric or device-lock confirmation; PASS369 does not receive biometric templates or your device PIN. Encrypted backup files are created only when you choose to export them to a destination you select. Keep the backup password separately.
Account and purchase data
If you sign in, the account service processes your email address, an internal account identifier, sign-in challenges and sessions, trial dates, and license status. Purchases add product identifiers, purchase tokens or transaction references, payment state and renewal or expiry information. This supports account access, purchase verification, restoration and fraud prevention. Payment-card details are handled by the payment provider, not by PASS369. Google Play purchases use Google Play Billing; a separate website edition may offer PayPal.
Camera, network and service providers
The camera is optional and used to scan a sign-in QR code. PASS369 does not save or upload camera images. QR sign-in may hand off to Android or Google Play services. The app uses HTTPS for account and purchase requests and for checking the association between an app and a website. Those services receive network information such as an IP address. Supabase hosts the account service, Google services deliver sign-in email and handle Play purchases, and the payment SDK or hosting service may process technical and diagnostic data necessary to operate these services. PASS369 contains no advertising SDK and does not sell your personal data.
Technical service logs
When the app contacts the account service, its hosting infrastructure records the IP address, approximate country or city inferred from that address, browser or client information, the requested service endpoint, response status and timing. These logs support service diagnostics and protection against abuse. They do not contain GPS coordinates, passkey private keys or the contents of the local vault. Technical logs are kept according to the infrastructure provider’s configured retention periods.
How long data is kept
Account data is kept while the account exists. Sign-in codes expire after 10 minutes; expired challenges, sessions and rate-limit records are cleaned up by the service as it handles later requests. Deleting the account removes its profile, sessions and sign-in challenges, detaches payment records, and clears stored Google purchase-token ciphertext. Minimal transaction records and a keyed hash used to record a previously used trial are retained for purchase disputes and prevention of repeated trials. These retained records currently have no fixed automatic deletion date. Local vault data and exported files remain under your control until you delete them.
Your choices and deletion
You can export or remove local keys in the app. To delete the server account, sign in again, open Account and access, choose Delete account and confirm the registered email address. Alternatively, send a request from that address to 369apps.studio@gmail.com. We may verify ownership before processing a request. Account deletion does not cancel a Google Play or PayPal subscription: cancel it with the payment provider separately. See the account deletion page for detailed steps.
Security and changes
Connections to the account service use HTTPS. The local vault uses Android Keystore and the device lock; exported backups are protected by your backup password. No security product can guarantee absolute protection. This policy is updated when the product or its data processing changes; the date above identifies this version. For privacy questions or requests concerning your account data, contact the address above.
369apps.studio
369apps.studio@gmail.com