Privacy policy

Effective October 6, 2026.

NPass is a password manager published by Netersoft. It works fully offline: this policy explains what the app does with your data, which is almost nothing outside your device.

No data collected

NPass does not collect, transmit or sell any personal data. The app does not request Internet access, has no user account, contains no analytics, advertising or crash reporting tools, and talks to no server, Netersoft's included.

Data stored on your device

• Your accounts (titles, usernames, passwords, notes, custom fields) are encrypted with AES-256-GCM under a key protected by your master password (Argon2id derivation). They can only be read once the vault is unlocked.
• Your master password is never stored. Nobody, not even Netersoft, can recover it or decrypt your accounts without it.
• Your preferences (theme, language, auto-lock delay, generator options) are stored in clear: they contain no account data.

Uninstalling the app, or using "Erase the vault", permanently deletes this data.

Biometrics

If you turn on fingerprint or face unlock, a copy of the vault key is kept in the system's secure storage (Android Keystore, iOS Keychain), readable only after biometric authentication. NPass never has access to your fingerprints or face: the system performs the check.

Backups

A backup is a file encrypted with the password you choose when exporting it. You decide where to save it or whom to send it to (file, Drive, email…). From then on, the file is subject to the rules of the service you use, but its content stays unreadable without the backup password.

Camera

The camera is only used to read the QR code a website shows when you turn on two-factor authentication. NPass asks for permission the first time you scan. Camera images are analyzed on the device and are neither saved nor transmitted. You can also import a screenshot of the QR code: it is read on the device and not kept.

Clipboard

Copied passwords are flagged as sensitive to the system and cleared from the clipboard after 30 seconds.

Websites

An account's "Open website" button opens the address in your browser. NPass sends nothing else.

App reviews

After you add a few accounts, NPass may show the Google Play (or App Store) review prompt once, handled by Google (or Apple): the app does not know whether you rated it or what you wrote, and none of your account data is sent.

Children

As NPass collects no data, it collects no children's data either.

Changes

If this policy changes, the new version will ship with the app update, along with its effective date.

Contact

For any question about this policy or the app, write to support.netersoft@gmail.com.