Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies solely to the DynePass mobile application and its features. It does not apply to third-party services, applications, or cloud storage providers that you may choose to use independently through your device.

2. Information We Process

2.1 Information You Provide

DynePass processes information that you voluntarily enter into the app for the purpose of password management. This information is stored locally on your device only and may include:

• Login credentials (such as usernames, passwords, URLs, and notes)
• Payment card information (such as card numbers, expiration dates, and cardholder names)
• Two-factor authentication secrets used for generating time-based one-time passwords (TOTP)
• Notes and custom fields created by the user
• File attachments you choose to associate with entries (such as images or documents)
• A master password used to encrypt and unlock your vault
• An optional email address and password hint, if you choose to enable the password hint reminder feature

All such data is encrypted and remains under your control.

2.2 Biometric Information

If you enable biometric authentication (such as fingerprint or face recognition), DynePass relies on the Android operating system's biometric framework. Biometric data is processed and stored by the operating system and is never accessed, stored, or transmitted by DynePass.

3. Information We Do Not Collect

DynePass does not collect, store, or transmit any of the following:

• Analytics or usage statistics
• Advertising or marketing data
• Crash reports or diagnostics
• Device identifiers
• IP addresses
• Location data for tracking purposes
• Advertising IDs
• Account registration information
• Server-side logs

We do not operate servers and do not receive user data.

4. How Information Is Used

All information processed by DynePass is used solely on your device to provide the app's core functionality, including:

• Secure storage and retrieval of passwords and sensitive information
• Autofill functionality using Android's Autofill Framework
• Local encryption and decryption of your vault
• Generation of two-factor authentication codes
• Biometric unlocking, if enabled
• Manual backup and restore operations initiated by the user
• Optional password hint reminder sent using the email service selected by the user

DynePass does not use your information for analytics, advertising, profiling, or tracking.

5. Local Storage and Security

5.1 Local-Only Storage

All user data is stored locally on your device using an encrypted database. DynePass follows a zero-knowledge model, meaning we do not have the ability to access or recover your data.

5.2 Encryption

• All stored data is encrypted using industry-standard AES-256 encryption
• Encryption keys are derived from your master password using secure key derivation methods
• Biometric authentication is protected by Android's secure hardware and keystore system

6. Backups and Data Export

DynePass allows you to create manual, encrypted backups of your data.

• Backups are generated locally on your device
• You may choose to store or share backup files using third-party apps installed on your device (such as cloud storage or email apps)
• DynePass does not operate, control, or access any backup storage service
• Backup files remain encrypted and can only be decrypted with your master password

7. Email Password Hint Feature (Optional)

DynePass includes an optional feature that allows users to receive a password hint via email.

• This feature is entirely optional and must be explicitly initiated by the user
• The password hint is stored locally and encrypted on the user's device
• When requested by the user, DynePass sends an email containing the password hint using an SMTP email service
• Emails are sent from an official DynePass email address (support@dynepass.com)
• DynePass does not store sent emails or retain email content after delivery
• The email address is used solely for the purpose of delivering the password hint and is not used for marketing or tracking

8. Permissions

DynePass requests certain Android permissions solely to enable specific features, such as:

• Camera access for QR code scanning and local optical character recognition
• Storage or media access for manual backups and file attachments
• Biometric authentication for unlocking the app
• Network and Wi-Fi permissions for optional Wi-Fi Direct device-to-device synchronization
• Location permissions required by Android for Wi-Fi Direct functionality (not used for tracking)
• Autofill service permissions to enable form filling

Permissions are used only for their stated purposes and are not used for data collection or tracking.

9. Data Sharing and Third Parties

DynePass does not sell, rent, or share your data with third parties.

You may voluntarily interact with third-party services when using features such as manual backups or email sharing. Any data shared with such services is governed by their respective privacy policies.

10. Data Retention and Deletion

• All data remains on your device until you choose to delete it
• You may delete individual entries at any time
• All locally stored data is removed when the app is uninstalled
• Backup files remain available until you delete them
• Uninstalling the app removes all locally stored data, except for backups you have saved externally

11. Your Rights

Because DynePass does not collect or store data on external servers, you retain full control over your information, including the ability to:

• Access and view your data
• Modify or update stored information
• Delete all data from the app
• Export or back up your data
• Restore data from your backups

12. Children's Privacy

DynePass is not directed at children under the age of 13. We do not knowingly collect personal information from children.

13. International Use

DynePass does not transmit data to external servers. All data processing occurs locally on your device, except when you voluntarily share encrypted backups or emails using third-party applications.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the app or legal requirements. Any updates will be reflected by a revised "Last updated" date. Continued use of DynePass constitutes acceptance of the updated policy.

15. Contact Information

If you have questions or concerns about this Privacy Policy or DynePass's privacy practices, you may contact us at: