Privacy Policy
Effective August 3, 2026
Passmaster is a password manager for Mac, iPhone, and iPad. The short version: Passmaster collects nothing. There are no accounts, no analytics, no tracking, and no servers operated by the developer. The long version follows, and it is not much longer.
What Passmaster stores, and where
Everything you save in Passmaster — logins, cards, bank accounts, notes, and the rest — is encrypted on your device using a key derived from your passphrase. The encrypted data is stored on your device and, through Apple's CloudKit, in the private database of your own iCloud account so your devices stay in sync. That iCloud storage belongs to you and is governed by Apple's privacy terms; the developer has no access to it, no copy of it, and no key that could open it.
What the developer receives
Nothing. Passmaster contains no analytics, no crash-reporting SDK, no advertising identifiers, and no third-party code. The developer cannot see what you store, when you use the app, or that you use it at all. If you email support, the developer receives your email — that is the complete list.
Network connections Passmaster makes
- iCloud sync — encrypted vault data to and from your own iCloud account, via Apple's CloudKit.
- Site icons — when you save or import a login that has a website, Passmaster fetches that site's public icon once, over HTTPS, directly from the site itself. No third-party icon service is used, so no outside party learns what sites are in your vault. The icon is then stored inside your encrypted data like everything else.
Passmaster makes no other network connections. It never fetches anything while locked, and nothing about your vault is written to disk unencrypted.
Face ID and Touch ID
Biometric unlock is handled entirely by your device's operating system and Secure Enclave. Passmaster never sees, stores, or transmits biometric data — the system only tells the app that a check succeeded.
Your passphrase
Your passphrase never leaves your devices and is never stored anywhere, by anyone. There is no recovery mechanism: if the passphrase is lost, the data is unrecoverable. This is deliberate — any mechanism that could recover your data for you could recover it for someone else.
Deleting your data
Delete items or entire vaults inside the app; deleting a vault removes its data from your devices and your iCloud. Because the developer holds nothing, there is nothing further to request deletion of.
Children
Passmaster does not knowingly collect information from anyone, children included — it does not collect information at all.
Changes
If this policy ever changes, the new version will appear at this address with a new effective date. Given what the policy says, changes seem unlikely.