Privacy Policy

1. Scope

This policy covers the Operator Crypt app for Android and iOS. It explains what data the app handles, where, and what rights you have under the EU and UK General Data Protection Regulation (GDPR / UK GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), other US state privacy laws, the Children's Online Privacy Protection Act (COPPA) and the California Online Privacy Protection Act (CalOPPA).

The developer and contact for privacy questions is Operator Apps, support@operatorapps.dev.

2. Data the developer collects

None. The developer does not receive, see, store, sell, share or otherwise process any personal data from the app:

• The Android app does not request the Internet permission, so it cannot connect to any network.
• The iOS app contains no networking code, no analytics and no advertising identifier access.
• There is no account, sign-in, telemetry, crash reporting, advertising or tracking inside the app.

3. Data the app stores on your device

The app processes data only on your device, under your sole control:

• Content you enter: password records (title, type, username, password, URL, notes, password history) and documents you upload (any file type), with their names, notes and favourites.
• Technical, non-secret data: a random salt, the number of recent failed unlock or PIN attempts (used to slow down guessing), and the date you acknowledged the privacy notice.

All content is encrypted with AES-256-GCM before it is written. The key is derived from your master passphrase with Argon2id (64 MiB, 3 passes); each password record and document has its own random key; optional PINs add a second layer. Your passphrase, PINs and recovery key are never stored. Without them nobody, including the developer, can decrypt your data, and nobody can recover it for you.

On Android, the app's data folder is excluded from Google cloud backup and device-to-device transfer, and screenshots and screen recording are blocked.

On iOS, the app's data folder is excluded from iCloud backup, and the app switcher shows a blank screen.

You may choose to store sensitive information (for example health, financial or identity documents). It is treated exactly like everything else: encrypted on your device and never sent to the developer.

4. When data leaves your device

Only when you decide, through the system dialogs of your phone:

• Encrypted backup (.ocbak): stays encrypted and opens only with your passphrase.
• Data export: a decrypted zip of a vault (passwords as CSV and JSON, documents as original files). It is not encrypted; keep it safe.
• Save to phone: a decrypted copy of one document, written where you choose.
• Open with: a temporary decrypted copy handed to another app you pick. The app wipes its own copy when the vault locks.
• Clipboard: a copied password stays on the system clipboard until it is wiped automatically after the time you choose (15 seconds to 2 minutes). Other apps with clipboard access may read it meanwhile.

Whatever service or app you send these files to handles them under its own privacy policy.

5. Legal basis (GDPR)

Because the developer does not process your personal data, the developer is not a controller of the content you keep in the app; you are in control of it on your own device.

If you email the developer, your email address and message are processed to answer you (Art. 6(1)(b) and (f) GDPR: answering your request, and a legitimate interest in providing support) and deleted within 12 months after the conversation ends, unless a longer period is required by law.

6. Your rights

GDPR / UK GDPR: access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and the right to lodge a complaint with a data-protection supervisory authority (in the EU, the authority of your country of residence, place of work or of the alleged infringement; in the UK, the Information Commissioner's Office).

US state laws (California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others): the right to know, access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising and profiling, limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

How to exercise them. All your data is on your device, so you exercise these rights directly in the app, without asking anyone:

You may also write to support@operatorapps.dev, directly or through an authorised agent. Because the developer holds no personal data about you from the app, the answer will confirm that no data is held. Requests are answered within one month (GDPR) or 45 days (CCPA).

7. California notice (CCPA/CPRA)

In the preceding 12 months the developer has collected no categories of personal information through the app, has sold or shared none, has used no sensitive personal information, and has no financial incentive programmes.

Do Not Sell or Share My Personal Information: the developer does not sell or share personal information. Global Privacy Control (GPC) and Do Not Track: there is no tracking for these signals to switch off (CalOPPA disclosure).

8. International transfers, profiling, automated decisions

None. No data is transferred to any country, and there is no profiling or automated decision-making.

9. Children

The app is not directed to children under 13 (COPPA) or, in the EU, under 16, and collects no personal information from anyone. Parents who believe a child uses the app can delete its data as described in section 6.

10. Permissions

• Android 12 and older: storage permission, used only to save files where you choose (Save to phone, backups, exports). Android 13 and later use the system save dialog and need no permission.
• iOS: no permission; files are saved through the system save dialog.
• File picker: the app sees only the files you pick to encrypt or restore.

No location, camera, microphone, contacts, Internet or advertising-identifier permission is requested.

11. App stores

The app stores you download the app from (Google Play and the Apple App Store) process data when you download and update the app, under their own privacy policies. They give the developer only aggregated, non-identifying statistics (such as install counts) and, if you opted in on your device, anonymous crash reports. The developer cannot link these to you or to anything stored in the app.

12. Security

The app uses well-established cryptography (Argon2id, AES-256-GCM, HKDF-SHA256), locks automatically when idle or in the background, throttles wrong attempts, and keeps no plaintext on disk except copies you ask for. No system is perfectly secure: a compromised device (malware, a rooted or jailbroken phone) or a weak passphrase can put your data at risk. Use a long, unique passphrase and keep your recovery key offline.

13. Changes

If this policy changes, the new version is shipped with the app (and shown again on first launch) and published at this address with a new effective date.

14. Contact