Privacy Policy

1. Who we are

PassDan ("we", "our", or "us") makes the PassDan password manager apps for macOS and iPhone, including the iOS AutoFill extension (together, the "Apps"), and this website. This policy explains what happens to your information when you use them.

2. Your vault

Everything you store in PassDan — passwords, usernames, verification secrets, notes, and any other fields — is part of your vault. Your vault is encrypted on your device:

• Your master password is stretched with Argon2id into a key that protects a random vault key.
• Each item is encrypted separately with AES-GCM before it is written to disk.
• A 24-word recovery key, shown to you once, can also unlock the vault key.
• If you turn on Touch ID or Face ID, the unlock key is kept in your device's Keychain, protected by the operating system.

We never receive your master password, your recovery key, your vault key, or the contents of your vault. We cannot recover them, reset them, or read them, and we cannot hand them to anyone else.

3. Sync with iCloud

Sync is optional and off until you turn it on. When it is on, the Apps use Apple's CloudKit to store encrypted records in the private iCloud database of your own Apple account. Those records contain ciphertext plus the minimal metadata needed to sync (a vault identifier, the record type, and a deletion timestamp). Apple stores this data under Apple's own privacy policy; neither Apple nor we can decrypt your vault. We have no access to your iCloud account.

4. Information we do not collect

The Apps do not include analytics, advertising, tracking, or third-party SDKs that collect data. We do not collect:

• names, email addresses, or account details — there is no PassDan account;
• usage statistics, device identifiers, or location;
• the websites, apps, or services you store logins for.

5. Purchases

Subscriptions are sold and processed by Apple through the App Store. The Apps check your subscription on your device with StoreKit. We do not receive your payment details. Apple may share aggregated, anonymous sales reports with us, as it does with every developer.

6. Crash reports

If you choose to share analytics with app developers in your Apple device settings, Apple may provide us with anonymous crash reports and diagnostics. These never contain the contents of your vault. You can turn this off at any time in your device's Privacy settings.

7. Support requests

If you email us, we receive your email address and whatever you choose to include. We use it only to reply, and we delete support conversations when they are no longer needed. Never send us your master password, recovery key, or vault contents.

8. This website

passdan.com uses no cookies, no analytics, and no third-party trackers. Like any web server, our hosting may keep short-lived technical logs (such as IP address and requested page) for security and reliability. These logs are not used to identify or profile you.

9. Data retention and deletion

Your vault stays on your devices and in your iCloud for as long as you keep it. You can erase it at any time from the Apps' Settings. You can also remove PassDan's iCloud data in your device's iCloud storage settings. Deleting the Apps removes their local data from that device.

10. Children

The Apps are not directed at children under 13, and we do not knowingly collect information from anyone, of any age.

11. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, or delete personal data. Because we do not hold personal data about you beyond any support emails, the data in PassDan is already fully under your control. To ask about support emails, contact us below.

12. Changes to this policy

If we change this policy, we will update the date above and publish the new version on this page. If a change materially affects how your data is handled, we will also mention it in the Apps' release notes.

13. Contact

Questions about privacy: privacy@passdan.com