My Passwords — Privacy Policy

Last updated: October 7, 2026

This Privacy Policy describes how My Passwords (“the App”, “we”, “us”, or “our”), developed by Stellar Flavor, collects, uses, and protects information when you use the App on iOS and Android.

The short version

My Passwords encrypts your data on your device before it leaves it. Only your master password can open it: we cannot read your passwords or any other item you store in the App. Your master password never leaves your device and is never stored on any server. The App has no ads.

Information We Collect

• Account information: your email address, name (if you provide it) and the sign-in method you use, needed to create your account and sync your data between devices.
• Your encrypted vault: the items you store in the App (passwords, websites, email and server settings, Wi-Fi, databases, API keys, licenses, cards and secure notes). They are encrypted on your device with algorithms such as Argon2id and XChaCha20-Poly1305 before being synced. In the cloud we only hold encrypted text that we cannot decrypt.
• Technical data needed to run the service: such as your IP address, device type, operating system and app version, which our servers receive when your device syncs.
• Support communications: your email address and the content of any message you send us.

We never receive or store your master password, your recovery key, or the decrypted content of your vault. Our servers cannot see the titles, usernames, passwords or any other field you save.

On your device, the App can use Face ID, Touch ID or fingerprint to unlock. This biometric data is handled by your operating system and is never accessible to the App or sent to us.

Security scoring (detecting weak or repeated passwords) and the password generator run entirely on your device.

How We Use Your Information

• Create and manage your account
• Store and sync your encrypted vault between your devices
• Operate, secure and maintain the service and prevent abuse
• Respond to support requests
• Comply with legal obligations

We do not use your information for advertising and we do not sell it.

Sharing of Information

We do not sell your personal information. Data may be shared with:

• Service providers: companies that help us operate the App, such as authentication and cloud hosting, under appropriate confidentiality and data protection terms. Vault data they host is encrypted and unreadable to them.
• Apple and Google, when you download the App or use sign-in with their services, under their own privacy policies.
• Legal authorities, when required by law. Because we cannot decrypt your vault, we cannot hand over its contents.
• Successors, in connection with a merger, acquisition, or sale of assets.

Your Master Password and Recovery Key

Because only you hold the key, nobody can recover your master password, including us. When you start using the App, we show you a recovery key: keep it in a safe place, as it is the only way to regain access if you forget your master password. If you lose both, your data cannot be recovered.

Security

Your vault is encrypted end to end on your device. The App locks automatically when you leave it and blocks screenshots of its content. We apply reasonable technical and organizational measures to protect your information, but no method of transmission or storage is completely secure.

Data Retention and Deletion

We keep your account and encrypted vault for as long as your account is active. You can ask us to delete your account and all associated data at any time by emailing sun@stellarflavor.com from the address linked to your account, with the subject “Delete my My Passwords account”. We will verify the account is yours and delete it, together with your encrypted vault, within 30 days.

Data stored only on your device is removed when you uninstall the App.

Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below.

Children’s Privacy

The App is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Third-Party Services

The App relies on third-party services, including Apple, Google and our cloud hosting and authentication providers, which have their own privacy policies. We are not responsible for their privacy practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy, contact us at:

Email: sun@stellarflavor.com