Who this applies to
This policy describes how the ENGRAMPass Android app ("ENGRAMPass", "the app") handles your information. ENGRAMPass is published by Orion Systems ("we", "us"). It applies to everyone who installs and uses the app.
What ENGRAMPass does and does not store
- Your passwords are never stored. They are recomputed on the device from your master password each time they are needed.
- The app stores your list of site settings (site names, usernames, counters, style choices, tags, notes, and any 2FA setup keys), and any identity you save (name, email, phone, address), in the app's private storage, encrypted with a key derived from your master password.
- If you turn on biometric unlock, your master key is wrapped by a key in the Android Keystore that only your biometric can release. It stays on the device.
What we collect
Nothing. The ENGRAMPass app has no servers and no internet permission, so we do not and cannot collect, receive, or transmit any of your data. There are no analytics, crash reporting, advertising identifiers, or tracking of any kind, and there is no account to create.
Permissions
- ENGRAMPass registers as an autofill service so it can fill passwords and identity details into other apps and browsers at your request. It does not read or transmit their content.
- ENGRAMPass uses the camera only when you choose to scan a 2FA QR code. The image is processed on the device to read the code and is never saved or transmitted.
- ENGRAMPass does not request internet, contacts, location, or storage permissions beyond the single file you pick during an export or restore.
- The optional ENGRAMPass Supporter companion app, which you install only if you choose to unlock the extras, uses the network solely to validate your one-time Google Play purchase. It collects no personal data and never sees your passwords or vault.
Backups and exports
You can create an encrypted backup that you control, optionally protected by a separate backup password. Backups are written only to the location you choose. We never receive a copy, and we cannot read your backups.
Data sharing
We do not share, sell, or disclose your information to anyone, because we never have it. No data leaves your device through ENGRAMPass.
Children's privacy
ENGRAMPass is a general-audience security tool and is not directed at children under 13. Because we collect no data, we do not knowingly collect information from anyone, including children.
Your control
You can delete any entry, clear all app data, or uninstall ENGRAMPass at any time from your device settings. Because nothing is stored off-device, removing the app removes everything ENGRAMPass holds.
Changes to this policy
If we update this policy, we will post the revised version at this address and update the effective date above. Material changes will be reflected in the app's release notes.
Contact
Questions, support requests, and feature ideas can be sent to the publisher, Orion Systems.