1. What this policy covers
This policy explains how the PassSquirrel Android application, developed by BLUESTONES, handles information when you generate passwords and store login details. PassSquirrel is an offline tool. It does not require registration, provide an online account, or request Android's Internet permission.
This document describes the app. Google Play, Android, your device manufacturer, your keyboard, and any services you choose to use have their own data practices.
2. Data handled locally
The app processes the information you enter or generate to provide its features. This processing takes place on your device.
| Information | Purpose and handling |
|---|---|
| Vault content | Entry titles, usernames or email addresses, passwords, website text, notes, categories, and favorite status are encrypted together before being saved in the local Room database. |
| Record metadata | A randomly generated entry ID, creation and update timestamps, encryption initialization vector, and ciphertext are stored outside the encrypted content. These stay in the app's local database. |
| Generator settings | Password length, character options, generation mode, word count, and separator preference are saved locally in Room without field encryption. These settings do not contain saved passwords. |
| Temporary working data | Generated passwords, unsaved edits, search text, and decrypted entries are used in app memory. A generated password is added to the database only when you save an entry. |
Search, filtering, sorting, password-strength estimates, and repeated-password checks run locally on decrypted data. The app creates no unencrypted search index and performs no online breach checks. A website address entered in a vault item is stored as text; the app does not fetch that website.
3. Collection & sharing
The developer does not receive your vault contents through the app. The app contains no network calls, advertising SDKs, analytics SDKs, or automatic telemetry reporting. It does not collect or send advertising IDs, device identifiers, location, contacts, browsing history, or usage events to the developer.
The developer does not sell, share, or upload app-held vault data. There is no cloud processor or server-side copy of your vault. Information you deliberately send outside the app, such as a support message or content pasted into another application, is handled through the service you choose.
Android or Google Play may handle installation information, diagnostics, or other device information under their own settings and policies. These platform activities are separate from data collection by PassSquirrel.
4. Storage & device access
Saved credential content is encrypted with AES-256-GCM before it reaches the Room database. Each save uses a fresh random initialization vector. The encryption key is generated and managed by Android Keystore; it is not sent to the developer. The app does not store a separate master password.
If your device has a configured PIN, pattern, or password, the app uses Android's device-credential confirmation screen to unlock access and locks when it goes into the background. The app's visible vault and generated-password state are cleared when it locks. The app receives the authentication result, not your device PIN, pattern, or password.
Without a configured device screen lock, the app opens without an authentication step. Local encryption still applies, but anyone able to use your unlocked device may be able to open the vault. The device-credential screen is an app access control; it is not a separate password used to encrypt the vault.
Encryption and app locking reduce exposure but cannot guarantee protection on a compromised device or against every operating-system, hardware, or physical-access risk. Your device security, keyboard, accessibility services, and other installed software can affect confidentiality.
5. Clipboard & screenshots
Copying a password or username
When you tap Copy, the selected value is placed on Android's system clipboard and marked as sensitive. The app schedules removal after 30 seconds and checks its own ownership marker so it does not clear a newer, unrelated clipboard value.
Clipboard cleanup is best effort. Android can restrict clipboard access in the background; if cleanup is deferred, the app retries when it returns to the foreground. If the app process is stopped, its scheduled task may not run. Android, your keyboard, clipboard history tools, and applications into which you paste can handle or retain copied content under their own rules. Clearing the system clipboard cannot remove a copy already made elsewhere.
Screen capture
Release builds enable Android's secure-window protection for the app and its dialogs to restrict screenshots, screen recording, and recent-app previews. Debug builds allow screenshots on the main screen and in dialogs for testing. Platform behavior can vary, and these protections cannot prevent an external camera from recording the screen.
6. Retention & deletion
Saved entries remain on your device until you delete them or remove the app's data. You can edit or delete individual entries in the Vault. Deleting an entry removes it from the app's local database; there is no developer-held or remote copy to erase.
You can remove all locally stored entries and settings by clearing PassSquirrel's app data in Android settings or uninstalling the app. These actions do not delete information already pasted into other apps or copies you created outside PassSquirrel.
Database deletion is not a promise of forensic erasure from physical storage. Android, database journaling, and device storage behavior can affect whether remnants are recoverable.
7. Backups & recovery
PassSquirrel disables Android app backup and excludes its data from cloud backup and device transfer through its app configuration. It has no built-in export, cloud synchronization, or developer recovery service.
Keep independent recovery methods for your accounts. Uninstalling the app, clearing its data, losing the device, or losing access to its Keystore key can permanently remove access to your vault. The developer cannot restore a lost vault or reset a master password. App encryption does not protect an account if its only recovery details are lost with the device.
8. Children
PassSquirrel is intended for people aged 13 and older and is not directed at children under 13. The app does not ask for a date of birth or collect personal information through an online account.
9. Policy changes
This policy may be updated if the app's features or information-handling practices change. The revised policy will show its effective date. Review the policy made available with future app releases for the practices that apply to those releases.
10. Contact
For privacy questions about PassSquirrel, contact the developer, BLUESTONES, at idkara501@gmail.com. The email link opens your chosen email application; PassSquirrel does not send email automatically.
Do not include passwords, device-unlock credentials, recovery codes, or vault contents in a support message. Information you choose to send by email is handled by your email service and received by the developer to respond to your request.