Privacy Policy

Overview

PassSumo is a password manager for Mac and iPhone. Each app reads and writes your vault file on your own device and does not collect, transmit, or store any of your data anywhere else. There is no analytics, no telemetry, no crash reporting, and no user account of any kind.

What PassSumo collects

Nothing.

There is no analytics, no telemetry, no crash reporting, no advertising, no third-party SDK, and no account. Your vault and everything in it never leave your devices through PassSumo — not to the developer, not to anyone.

PassSumo connects to no server of ours, because there is none. Where a version offers them, PassSumo for Mac uses an encrypted local-network connection between devices you pair yourself (never through a server), downloads site icons when you ask it to, and uses Apple's StoreKit for purchases. PassSumo for iPhone makes no network connections. StoreKit contacts Apple to load the purchase options, complete a purchase, restore an earlier one, and learn when a subscription renews or ends; that exchange is between your device and Apple, it carries nothing from your vault, and the developer never receives your payment details. There is no other server in the picture.

Local-network sync, where a version offers it, works only between your own devices, which you pair once with a PIN. What moves over that connection is your encrypted database file, directly from one device to the other and never through a server, and the developer cannot see it. Nothing is listening or searching for your devices until you start using the feature, and the system asks for your permission to use the local network at that point.

Site icons, where a version offers them, are optional and downloaded only when you click to download one. PassSumo for Mac then makes an HTTPS request to the site named in that entry's own address, the same address your browser would visit, and that site sees your IP address as it would for any visit. No icon service is involved, and nothing is sent to the developer.

Your vault

Your passwords live in a single encrypted file in the standard KDBX format, which you pick or create through the system's file chooser (Finder on the Mac, Files on iPhone), in iCloud Drive or on local storage. PassSumo does not pick that location for you and runs no cloud sync service of its own: the file moves between your devices through whatever you already use (iCloud Drive, for example) or, where a version offers it, directly between devices you pair yourself on your local network, as the same encrypted file. The vault's contents are encrypted under a key derived from your master password, using the encryption the KDBX format itself specifies (AES-256 or ChaCha20 under an Argon2-derived key) — the same protection any compliant KDBX reader or writer applies.

Both apps run inside Apple's app sandbox, so the vault file you open or create — the one you explicitly picked through the system file chooser — is the only place outside their own containers they can read or write at all.

Touch ID and Face ID unlock

Touch ID or Face ID unlock is optional and off until you turn it on. Enrolling it stores your master credential in the Keychain of that device, behind Touch ID on the Mac or Face ID on iPhone, through Apple's own LocalAuthentication framework. Your fingerprint or face is never available to PassSumo, or to any app — it is handled entirely by Apple's Secure Enclave. PassSumo only ever receives a yes-or-no answer from the system.

Backups

The Mac app keeps backup copies of your vault: inside its own app container in earlier versions, and in later versions only if you choose a backup folder. With a folder chosen, it copies each database there at most once a day when the database is opened, and whenever you use "Back Up Now"; an ordinary save makes no backup. The app never deletes anything in that folder. With no folder chosen, later versions make no backups. PassSumo never uploads a backup anywhere.

AI agent access

If you turn on AI agent access in the Mac app, the AI agents you approve can read the entries you allow, and, only if you choose that when you approve, add new entries in the folders you allow, for the time you allow. They cannot change, move or delete existing entries. What an agent does with them is between you and that agent's provider; nothing is sent to the developer.

Subscription

Where PassSumo offers a subscription, it is bought through Apple's App Store using Apple's StoreKit. Purchases, payment collection, renewals, trials and cancellations are handled entirely by Apple under Apple's own Privacy Policy. The app asks Apple only what you have bought, to unlock the extras, and the exchange is between your device and Apple. The developer receives no payment data and no personal data from the app: not your card, your billing address, your Apple ID or anything from your vault. What the developer does receive is Apple's ordinary sales reporting, aggregate counts of purchases and refunds by country, which identify nobody. Manage or cancel a subscription any time in your Apple ID account settings.

Whether you subscribe or not, your vault stays usable: the subscription unlocks extra features only. See the Terms of Use.

This website

This site is static HTML with no cookies, no analytics, and no tracking scripts of any kind. The one page that sends anything anywhere is the feedback form, and it sends what you type into it — your message, an email address if you chose to leave one, and which app the message is about. That submission is handled by the site's hosting provider, which forwards it through a third-party messaging service to a private chat the developer reads; the message, the optional email address, and the app name all sit with that third party. Messages stay in that chat until deleted by hand — nothing removes them automatically. None of it is used for anything other than replying to you.

Like any hosted site, the provider's infrastructure may log standard web-server data (such as IP addresses) as part of normal operation, independently of PassSumo and of anything you do in the app. Providers are described here by what they are rather than by name, so that changing one is a deployment change and not a rewrite of this page.

Requesting deletion, or withdrawing consent

There is nothing collected here to delete or to withdraw consent for — PassSumo doesn't hold anything about you on any server. If that ever changes, or if you have a question about it, the feedback form is the one route to reach the developer, and any such request is handled there.

Who is responsible

PassSumo is made and operated by an independent individual developer, not a company. The feedback form is the way to reach them.

Children

PassSumo is not directed at children, and the feedback form is not intended for use by them.

Changes to this policy

If this policy changes, the update is posted here with a new "Last updated" date above.

Contact

Questions about this policy: the feedback form.