Privacy Policy

1. Fundamental Architecture & Core Principle

OPM (Offline Password Manager) is built on an absolute, zero-compromise architectural premise: air-gapped credential isolation. We believe that your master password, credentials, cryptographic keys, two-factor seeds, and secure notes must never touch a remote server or leave your physical hardware.

OPM is engineered to operate strictly offline. All credential encryption and database transactions take place locally on your phone without communicating with remote cloud servers or transmitting data across the internet.

2. Information Stored Locally

Credential Vault Contents

OPM stores user-entered data exclusively inside a sandboxed, locally encrypted database file on your device:

• Login credentials (service names, usernames, encrypted passwords)
• Two-Factor Authentication (TOTP / 2FA) secret seeds
• Encrypted secure notes, sensitive identifiers, and custom fields
• Categorization tags and vault organization metadata

Biometric & Master Key Derivation

Your Master Password is never stored in plaintext anywhere on your storage or RAM. It is passed through an Argon2id cryptographic key derivation function. Biometric authentication (Fingerprint / Face Unlock) interfaces directly with your smartphone's Hardware Security Module (Android Keystore / iOS Secure Enclave) to decrypt the database key in hardware memory.

Telemetry & Diagnostics

OPM contains zero third-party analytics SDKs, zero advertising frameworks, and zero behavioral trackers. We collect 0 KB of telemetry.

3. Cryptography & Data Protection

SQLCipher AES-256 GCM

All SQLite database pages, schema metadata, and record blobs are encrypted at rest using industry-standard SQLCipher 256-bit AES encryption with HMAC-SHA512 verification for cryptographic integrity.

Zero Centralized Cloud Infrastructure

We do not host or operate any sync servers, authentication servers, user account databases, or cloud relay bridges for OPM. We have no master recovery keys, backdoors, or access to your vault under any circumstances.

Encrypted Backup Archives

When you choose to export a backup archive from OPM, the backup file is written locally in an encrypted format using your master key. You retain 100% control over how and where this backup file is preserved (e.g., flash drive, SD card, or personal offline storage).

4. Information Sharing & Third Parties

Because we do not collect, intercept, or receive your personal information or vault data, we cannot sell, share, disclose, or monetize your data with third parties, advertisers, or government bodies.

5. Your Rights and Data Control

Because all data is stored on your device, your rights under privacy regulations (GDPR, CCPA, CPRA) are directly exercisable by you at any moment:

• Portability & Access: Export your full encrypted database archive directly from within the app.
• Modification & Purging: Edit, overwrite, or permanently erase individual credential items instantly.
• Total Vault Erasure: Perform a hardware-level cryptographic wipe from the app settings, or wipe app data via OS settings.

6. Children's Privacy

OPM does not collect, retain, or transmit data from any user, including children under 13 years of age.

7. Contact Us

If you have questions regarding OPM's cryptographic design, privacy posture, or security standards, contact our privacy and security team: