Your privacy and security are our top priorities
Zafonyx Local (formerly Password Safe Vault) processes all data locally on your device. We do not collect, store, or transmit your passwords or keys.
Zafonyx Local is a local-first password manager. We use AES-256-GCM encryption on your device. Passwords and authenticator secrets are encrypted locally before storage or optional local-network sync. There is no Zafonyx Local cloud vault and no Zafonyx Local account to create.
Zafonyx Local account: We do not require a Zafonyx Local login. You install and use the app on your device. Store purchases use your Apple, Google, or Microsoft store account — that account is for payment and Restore Purchases only, not a Zafonyx Local cloud identity.
Vault data: Passwords, notes, and authenticator secrets are encrypted on your device. We cannot read your vault contents.
Device information: We may receive limited device or app version information through app stores or crash reporting channels needed to keep the app working.
Usage analytics (optional): If you enable analytics, we may collect anonymous usage statistics such as feature usage or crash reports. This does not include vault passwords or secrets.
We use limited information only to:
Sensitive vault data is encrypted with AES-256-GCM on your device. Your lock PIN / master secret is used locally to protect access. On devices with security hardware, a forgotten PIN can be reset with your face, fingerprint, or device passcode; there is no vendor reset.
Local storage: Your encrypted vault stays on your device. Uninstalling the app removes that device’s vault unless you have a backup or another synced device.
Local network sync: With store unlock, you may sync encrypted vault data between your own devices over Wi‑Fi or Ethernet. Transfer is end-to-end encrypted. We do not operate a vendor cloud that holds your vault.
Retention: Vault data remains on your devices until you delete it, uninstall without a backup, or replace it via import. Support emails you send are retained as needed to help you.
App stores: Purchases and Restore Purchases are handled by Apple, Google, or Microsoft under their policies. We do not receive your vault plaintext through those stores.
Analytics: If enabled, anonymous analytics or crash tools may process non-vault telemetry. They cannot decrypt your vault.
You can:
Zafonyx Local is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us so we can delete it.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Review this policy periodically.
If you have questions about this Privacy Policy or our data practices, contact us: