1. Our approach: zero-knowledge
Nova Passwords is designed so we cannot see your passwords. Everything is encrypted on your device with your master key before it leaves it. Our servers only hold encrypted blobs we cannot decrypt.
This means that neither we, nor an employee, nor a third party who accessed the infrastructure could read the contents of your vault.
2. Data we collect
Account data: your email address (to identify your account and sign in) and an authentication hash derived from your master key (never your master key itself).
Encrypted data: your vault (passwords, notes, etc.) stored as end-to-end encrypted blobs.
Minimal technical metadata: sync timestamps and device identifiers needed for multi-device sync and account security.
3. What we cannot see
We have no access to your master key, nor to the decrypted contents of your vault: passwords, API keys, tokens, cards, notes or any secret you store.
We do not sell your data or use it for advertising. We do not build ad profiles about you.
4. How we use data
We use account data and technical metadata solely to provide the service: authenticate you, sync your encrypted vault across devices, protect the account against unauthorized access, and meet legal obligations.
5. Encryption and security
We use standard, audited cryptography: AES-256-GCM for content, PBKDF2-HMAC-SHA256 for key derivation, and HKDF and X25519 for key exchange between devices. Details are on our Security page.
6. Providers and third parties
We rely on cloud infrastructure providers for hosting and the database. These providers only process encrypted data and technical metadata, under data-processing agreements, and cannot decrypt your vault.
We do not share your data with third parties for marketing purposes.
7. Subscription and payments
The local vault is free. Cloud sync is an optional yearly subscription purchased through Apple in-app purchase (App Store).
Apple processes the payment; we never receive or store your card details. To validate the subscription we use RevenueCat, Inc. as a processor: it receives your Apple purchase receipt and an identifier for your account (your user ID), and tells us whether your subscription is active. RevenueCat has no access to your vault contents.
From all of this we store only your subscription status (active or inactive and its expiration date) to enable sync. You can manage or cancel the subscription from your App Store account settings.
8. Retention and deletion
We keep your account data while your account is active. When you delete your account, we remove the encrypted blobs and associated data from our production systems within a reasonable period, except what we must retain by legal obligation.
9. Your rights
Depending on your jurisdiction (for example, GDPR or CCPA), you may have the right to access, rectify, export or delete your personal data, and to object to certain processing. You can exercise these rights from the app or by contacting us.
11. Children
The Service is not directed to children under the minimum age applicable in your jurisdiction, and we do not knowingly collect their data.
12. Changes to this policy
We may update this Privacy Policy. We will post the current version on this page and, if changes are material, we will notify you.
13. Contact
For privacy questions or to exercise your rights, contact us at emeldoquiroz01@gmail.com.