Privacy Policy

Summary

Zen Passwords encrypts your vault with keys tied to your master password. Optional iCloud sync replicates encrypted data through Apple’s private CloudKit database for your Apple ID. We do not run our own servers and we never receive your master password. Zen Premium subscriptions are processed by Apple; we receive subscription status from StoreKit, not your card details. Imports, exports, password-health checks, and optional scheduled backups are handled on your device unless you explicitly save or share a file outside the App.

1. Data we process

The App processes information you enter or import: item titles and tags (stored in encrypted list metadata where applicable), usernames, passwords, notes, URLs, optional TOTP secrets, structured fields for cards, identities, bank accounts, Wi‑Fi, and licenses, custom fields you add, folder names (stored encrypted when sealed), folder accent colors, attachment images and filenames, and preferences such as lock behaviour, clipboard auto-clear timing, and optional companion allow-lists (item identifiers only, stored locally). Cryptographic operations use keys derived from your master password; optional biometric quick unlock stores related key material in the system Keychain when you enable it.

2. Where data lives and sync

Primary storage uses SwiftData on your device. When you are signed into iCloud, the App may sync vault records through your private CloudKit database (same Apple ID). Titles, tags, sealed payloads, sealed folder names, sealed attachment payloads, and similar fields are stored and transmitted as AES-GCM ciphertext that only your vault key can decrypt. Some non-secret metadata (for example record identifiers, item type, sort order, favourite/pin/archive flags, and timestamps) may exist in plaintext so lists can load and CloudKit can merge changes; it is not a substitute for your encrypted secrets. Device and iCloud backups follow your Apple account and computer backup settings. The App does not send your vault to servers we operate.

On supported platforms the App may apply system file‑protection attributes to the on‑disk database and related files so encrypted vault data has additional protection when the device is locked; behaviour depends on the OS, device settings, and backups.

3. Subscriptions (Zen Premium)

Zen Premium is sold through Apple’s In‑App Purchase system. Apple processes payment; we do not receive your full payment card number or Apple ID password. The App uses StoreKit to read subscription status and related transaction information so it can unlock Premium features. We do not use subscription data for advertising and we do not sell it. Apple’s privacy policy explains how Apple handles App Store transactions.

4. Imports and exports

When you import from CSV, JSON, or other supported formats, parsing and encryption happen on device. When you prepare an encrypted backup or export, the App may write a temporary file so you can share or save it; that file remains encrypted and is your responsibility once it leaves the App. Optional scheduled backups write encrypted JSON into the App’s Application Support directory on your device according to the cadence you choose in Settings.

5. Clipboard

When you copy a field, the value may be placed on the system pasteboard. You can configure an optional timer in Settings to clear the clipboard after copy if the content was not replaced. Choosing Lock now on the Home screen, or locking after the inactivity timer fires, clears the general pasteboard; automatic lock when you switch away from the App does not clear it so you can paste into another App first. The operating system and other apps may still read the pasteboard according to platform rules.

6. Biometrics

If you enable Face ID, Touch ID, or Optic ID, the platform may store cryptographic material in the Secure Enclave / Keychain to unlock the vault without typing the master password each time. Apple’s documentation describes how those APIs work.

7. Links and sharing

Using “Open” on a URL, exporting or sharing backup files, or using the system share sheet for attachments uses standard browser, Files, and sharing interfaces. Anything you send outside the App is no longer confined to the encrypted vault.

8. Password health

Password health summaries (such as reuse groups and length checks for web logins) are computed on-device from decrypted items in memory during the scan. Results are not sent to us; plaintext passwords are not uploaded for that feature.

9. Analytics and crash data

This build does not embed third-party analytics SDKs. Apple may collect limited diagnostics if you opt in to sharing analytics with Apple; that is governed by Apple’s privacy policy.

10. Children

The App is not directed at children under 13. Do not store information about children unless you have appropriate authority and consent.

11. Your choices

You can edit or delete individual items, change folders, export an encrypted backup, import or reset the vault, and remove the App. “Reset vault & onboarding” erases local vault data on the device as described in the app.

You can withdraw biometric quick unlock by disabling it in Settings and, if needed, managing Keychain data through system settings.

12. Changes to this policy

We may update this Privacy Policy when the App changes. The “Last updated” line at the top will change accordingly.

13. Contact

For privacy questions, email hello@zenproducts.ai or reach the publisher through the App Store listing. You can also use Contact developer in Settings.