Privacy Policy

Last updated: September 11, 2026

This document says what data reaches us and what never can. It is short because we have little to say: the product is built so that we cannot see what you keep in your vault.

What we receive

• Your email address, so the account exists and so we can tell you if something happens to it.
• Encrypted blocks. Every item in your vault — title, site, username, password, notes — goes into a single block encrypted on your device. We receive only the bytes.
• When each item was last changed and which folder it sits in. Just that, so syncing knows what moved.
• Your IP address and a device name, at each sign-in, so you can see them in Settings and disconnect a lost phone.

What we cannot see

Your master password never leaves your device. The key that opens the blocks is derived from it, locally. We do not have the key, a copy of it, or an unlock override. If you forget your master password and lose your recovery kit, we can do nothing — not at your request, and not at anyone else's.

How long we keep it

As long as you have an account. Deleted items stay 30 days in the trash, then go. The sign-in log is kept 12 months. When you delete your account, we delete everything within 30 days.

Who we give it to

Nobody, for advertising or analytics. We use suppliers to keep the service running — hosting, database, payment processing — and each receives only what it needs to do its job. Payment details are processed by Stripe; we never see your card number. The phone app contains no analytics or advertising tooling.

Your rights

You can export everything in your vault, any time, in an open format, including after the subscription ends. You can ask us to delete your account. You can ask for a copy of the data we hold about you. Write to us and we will settle it within 30 days.

Children

SpokPass is not aimed at children under 16 and does not knowingly collect their data.

Changes

If we change something important, we will tell you by email before it takes effect. We will never add a way for us to read vaults — that would be a different product.

Contact

For any question: office@spokpass.ro

Data controller: DECOIMOB TEHNO SRL, Bucharest, Romania.