🔒 Privacy By Design • Zero-Knowledge Architecture

HandySafe Privacy Policy

Last updated: 15 October 2026 • HandySafe Privacy Center

🚫

Zero Collection

No accounts, no analytics, no ads, and no developer telemetry servers.

🔐

AES-256 Storage

Entire vault encrypted with random keys protected by your master password.

☁️

User-Owned Cloud

Sync is optional and connects solely to your personal Google Drive or Dropbox.

👆

Isolated Biometrics

HandySafe never reads biometric data; the OS provides simple pass/fail flags.

HandySafe is an offline, encrypted vault for storing cards, logins, identity documents and notes. It is developed and published by the HandySafe team ("we", "us", "our").

This policy outlines what happens to your data, how it is safeguarded by cryptographic proofs, and your absolute sovereignty over your personal information.

📋 1. The Short Version

Core Guarantee: We cannot read your passwords, cards, or notes. Your encrypted vault belongs solely to you.

We collect nothing. HandySafe has no accounts, no analytics, no ads and no developer servers. We never receive your data.
Your vault stays on your device, encrypted with a key derived from your master password using Argon2id.
Cloud sync is optional. If you turn it on, an encrypted copy of your vault is stored in your own Google Drive or Dropbox account. We cannot read it, and neither can Google or Dropbox.

💾 2. Data Stored on Your Device

Everything you enter (titles, fields, passwords, card numbers, notes) is stored in a database encrypted with AES-256 (SQLCipher).

The encryption key is cryptographically random and is itself encrypted with a key derived from your master password using Argon2id (a memory-hard password hashing and key derivation function). Your master password is never stored on disk and never leaves your device.

Crucial Security Notice: Because this is a zero-knowledge architecture, if you forget your master password, your data cannot be recovered by anyone, including us.

Settings such as your visual theme and cloud-sync configuration are stored in the device's secure operating system storage (Android Keystore / iOS Keychain). Android backup is explicitly turned off for HandySafe, preventing your encrypted vault from being unintentionally mirrored to generic Android cloud backups.

👆 3. Biometric Unlock

If you enable fingerprint or biometric face unlock, the verification is performed exclusively by your device's operating system security chip (Hardware Secure Enclave / Android BiometricPrompt).

HandySafe receives only an authenticated pass or fail result from the operating system and never has access to your biometric prints, face maps, or sensor data.

☁️ 4. Optional Cloud Sync

When you choose to connect Google Drive or Dropbox in Settings:

Direct Provider Authentication: You sign in directly with Google or Dropbox via their official OAuth dialogs. HandySafe requests permission to use only its own isolated app folder:
- Google Drive: the hidden drive.appdata application folder. HandySafe has zero access to your personal Drive files or folders.
- Dropbox: the sandboxed Apps/HandySafe folder. HandySafe cannot access any other documents in your Dropbox.
End-to-End Encrypted Payload: HandySafe uploads the encrypted vault database, plus a small metadata manifest containing a vault identifier, revision number, timestamps, a checksum, and your vault key encrypted with your master password. None of this can be read without your master password.
Account Identifier: Your account's email address is displayed in Settings strictly for your convenience so you know which account is active. It is stored solely on your device.
Third-Party Terms: Your storage of encrypted backups on Google Drive and Dropbox is governed by their respective privacy policies and terms of service.

You can disconnect cloud sync at any time in HandySafe's Settings. To permanently remove the cloud backup:

Google Drive: Open Google Drive Settings → Manage apps → HandySafe → Options → Delete hidden app data.
Dropbox: Delete the Apps/HandySafe folder in your Dropbox account.

🗑️ 6. Deleting Your Data

Because all database records reside directly on your hardware:

App Uninstall: Uninstalling HandySafe from your device immediately purges all local databases, keys, and cached credentials.
In-App Reset: You can wipe and destroy your vault inside the application settings.
Cloud Backups: As detailed in Section 4, removing the app folder from your Google Drive or Dropbox permanently eliminates the cloud copies.

👶 7. Children's Privacy

HandySafe is not directed at children under the age of 13. HandySafe does not knowingly solicit or collect data from anyone, including children.

🔄 8. Changes to This Policy

Any future revisions to this policy will be published directly to this page with an updated "Last updated" date.

📬 9. Contact & Inquiries

If you have questions, security inquiries, or feedback regarding this policy, please contact us directly:

HandySafe Support

Direct Developer & Security Inquiries • ank2147@gmail.com

✉️ Email Support