PassArk ("the App") is a local-first vault for passwords and sensitive information, developed by Dongshen Wang. Our baseline position on privacy is simple: your data belongs to you. We cannot see it, and we do not want it.
This policy explains how the App handles information relating to you. It is provided in both Chinese and English; in case of any discrepancy, the version corresponding to the region of your App Store prevails.
2.Information We Do Not Collect
No collection
No account, no personal identifiers, no device IDs, no location
No tracking
No usage analytics, no browsing history, no advertising IDs
No third-party SDKs
No analytics, crash reporting, ads, or tracking
The App requires no account and does not collect: names, emails, or phone numbers; device identifiers or location data; usage analytics or browsing history; advertising identifiers. The App integrates no third-party analytics, crash-reporting, advertising, or tracking SDKs and uses no cookies or similar tracking technologies.
As declared on the App Store privacy label, the App is "Data Not Collected" and does not use data for tracking.
3.Your Vault Data (Stored Locally)
Every entry you create (accounts, passwords, URLs, notes, two-factor secrets, and so on) is stored only on your own device, encrypted with AES-256-GCM;
The encryption key is derived from your master password through hardened PBKDF2 key stretching. We have no way to obtain your master password or any decrypted content;
If the master password is wrong, or the data has been tampered with or corrupted, decryption fails outright. The App never returns plaintext in such cases;
Preferences (interface language, theme, auto-lock timing) are stored only in the device's local preferences storage and are never uploaded.
Vault content is end-to-end encrypted and lives only on your device and in your own iCloud; the App's developer cannot access its plaintext.
4.Biometrics (Touch ID)
The App requests fingerprint verification through the LocalAuthentication framework provided by macOS;
Your fingerprint data is kept by the operating system inside the device's Secure Enclave. The App never reads, stores, or transmits your fingerprint data;
The App receives only a "success" or "failure" result from the system and unlocks the vault accordingly.
5.Sync (Optional, and Always Your Choice)
iCloud Sync:
When enabled, encrypted vault content syncs through your own Apple account (CloudKit);
Content is end-to-end encrypted before it leaves the device. No server, including ours and Apple's, can read the plaintext;
We operate no proprietary account system or data server that stores your vault content.
File Sync: You may choose to save the encrypted vault file to a location of your choice (for example, a cloud drive folder). Where that file goes is entirely your decision.
6.Breach Detection (Optional, Manually Triggered by You)
When you run "Check Breaches" on the Password Health page, the App sends the first 5 characters of the SHA-1 hash of each password to the public Have I Been Pwned service (api.pwnedpasswords.com);
This is the industry-standard "k-anonymity" privacy-preserving query: full passwords and their complete hashes never leave your device, and the remote service cannot reconstruct or identify your passwords from the prefix;
You can stop using this feature at any time.
7.Clipboard and Audit Log
After you copy a password, the App clears the clipboard automatically after the interval you set. The App does not record any copied sensitive content;
The in-app audit log (unlocks, edits, deletions) is stored locally only, for your own review, and is never uploaded.
8.Data Retention and Deletion
All of your data resides on your device. Deleting an entry moves it to the trash; emptying the trash is irreversible;
Deleting the App removes all of the App's local data;
If you enabled iCloud Sync, manage the related data in your iCloud account via System Settings before deletion;
Exported encrypted backup files are your responsibility; their safety depends on where you keep them.
9.Children's Privacy
The App collects no personal information from anyone, including children. It is intended for general audiences and is not directed at children under 13.
10.Changes to This Policy
If we make material changes to this policy, we will highlight them in the App or on the App Store update page and refresh the effective date at the top of this page. By continuing to use the App, you agree to the revised policy.
11.Contact Us
If you have any questions about this policy or how the App handles data, contact us at skyerkj@163.com