Scope: this privacy policy applies to the mobile application SecureKey (password generator and manager), developed by ZnaetAPPS / Kapultcevich Maksim (hereinafter referred to as the "Service Provider"). The Service Provider acts as the operator of personal data in accordance with Federal Law No. 152‑FZ (entry in the operators register — available upon request).

Last revised: 2026-04-23

The SecureKey Application operates entirely in offline mode. All data (passwords, logins, notes, settings, as well as TOTP secret keys) is stored exclusively on the user's device and is never transmitted to the Service Provider's servers or to third parties.

At the same time, the Service Provider acts as the operator of personal data within the meaning of Federal Law No. 152‑FZ, as it organizes the processing of users' personal data within the app's functionality (including data storage and export). The processing is carried out exclusively on the user's device without data being transferred to the Service Provider's servers.

Data is stored in a local SQLite database on the user's device.

The database is encrypted using the AES‑256 algorithm. The encryption key is derived from the user's master password and exists only in RAM while the app is running; it is not stored separately and never leaves the device.

The Application does not have internet access and does not make any network requests.

The Application contains no analytics components, advertising SDKs, trackers, or any modules capable of transmitting data externally.

The Service Provider and the Application do not:

• collect any data during download and use other than what the user explicitly enters for storage in the app;
• require registration or account credentials;
• collect location data (GPS, Wi‑Fi, cellular networks);
• share data with third parties;
• use cloud storage, synchronization, or backup to servers;
• store or have access to your passwords, master password, TOTP secret keys, or encrypted database.

Technically, the Service Provider has no ability to retrieve, read, modify, or delete your data remotely.

The Application provides a data export function to a file for subsequent import into the same SecureKey app on another device of the user.

Exported data is saved in JSON format. The file contains structured data from the local database (including passwords, logins, and TOTP secret keys), with sensitive information remaining encrypted in accordance with the applied security scheme (AES‑256); decryption is only possible by entering the master password within the app.

The file is created and saved on the user's device. By default, the file is saved to the Documents folder, but the user can choose a different save location.

The Service Provider does not receive this file, does not store it, and has no access to it at any stage.

Import is only possible into the SecureKey app, and the user must enter the master password to decrypt the data.

The user is responsible for the security of the exported file. It is recommended to protect the file from unauthorized access: do not send it over insecure communication channels, do not upload it to public storage, and do not share it with third parties.

The user has full control over their data:

• Access to data is only possible by entering the master password in the app on the device.
• Editing and deleting individual entries is done through the app's interface.
• Deleting all history and data occurs when the app is removed from the device — in this case, all data is permanently deleted from the device.

The Service Provider does not provide data recovery functions, does not store copies, and cannot recover lost data.

Implementation of personal data subject rights. Since data processing occurs locally on the user's device, and the Service Provider has no access to the data, the following actions are performed by the user independently:

• access to data and its editing — through the app's interface;
• deleting individual entries — through the app's interface;
• complete termination of processing (deletion of all data) — by uninstalling the app from the device;
• withdrawal of consent to processing — by independently deleting data within the app and/or uninstalling the app itself.

The Service Provider does not store exported files and cannot perform actions with them upon user request.

The Application does not provide an automatic backup function to a server.

If necessary, the user can use file export (see Section 4) as a way to transfer data between their devices.

Important: when the app is uninstalled, all data is permanently deleted. The user is responsible for data safety (including creating and storing any local copies and exported files).

Data security depends on the security of the device itself (screen lock, protection against unauthorized access, absence of root access, etc.). The Service Provider is not responsible for data compromise due to device hacking or loss, or leakage of the exported file.

The legal basis for processing personal data is the user's consent, granted by starting to use the Application.

Purposes of processing:

• providing password manager functionality (storage, search, generation, export/import);
• generation and display of TOTP codes for two-factor authentication (2FA) — codes are computed locally based on the secret key stored on the device and the current time, without any data transmission;
• ensuring the Application operates in accordance with its stated functions.

The volume of processed data is limited to the information that the user independently enters and stores in the Application.

This Policy may be updated from time to time. The Service Provider will notify you of any changes by updating the text on this page. You are advised to review this Privacy Policy periodically. Continued use of the Application constitutes acceptance of the current version of the Policy.

If you have any questions regarding privacy or the Application's practices, please contact the Service Provider via email: support@znaetapps.ru.

适用范围：本隐私政策适用于移动应用程序 「SecureKey」（密码生成器和管理器），由 ZnaetAPPS / Kapultcevich Maksim（以下简称“服务提供商”）开发。服务提供商根据俄罗斯联邦第 152‑FZ 号联邦法律（运营商登记记录 — 可应要求提供）担任个人数据运营商。

最后修订日期：2026年4月23日

SecureKey 应用程序完全在离线模式下运行。所有数据（密码、登录名、备注、设置以及 TOTP 密钥）仅存储在用户设备上，绝不会传输到服务提供商的服务器或第三方。

同时，服务提供商根据俄罗斯联邦第 152‑FZ 号联邦法律的含义担任个人数据运营商，因为它组织在应用程序功能范围内处理用户的个人数据（包括数据存储和导出）。处理过程仅在用户设备上进行，数据不会传输到服务提供商的服务器。

数据存储在用户设备上的本地 SQLite 数据库中。

数据库使用 AES‑256 算法加密。加密密钥基于用户的主密码生成，仅在应用程序运行期间存在于内存中；它不会单独存储，也不会离开设备。

应用程序无法访问互联网，也不进行任何网络请求。

应用程序不包含任何分析组件、广告 SDK、追踪器或任何能够向外传输数据的模块。

服务提供商和应用程序 不会：

• 在下载和使用过程中收集除用户明确输入以存储在应用程序中的数据之外的任何数据；
• 要求注册或账户凭据；
• 收集位置数据（GPS、Wi‑Fi、蜂窝网络）；
• 与第三方共享数据；
• 使用云存储、同步或备份到服务器；
• 存储或访问您的密码、主密码、TOTP 密钥或加密数据库。

从技术上讲，服务提供商无法远程获取、读取、修改或删除您的数据。

应用程序提供将数据导出到文件的功能，以便后续导入到用户另一设备上的同一个 SecureKey 应用程序中。

导出的数据以 JSON 格式保存。该文件包含来自本地数据库的结构化数据（包括密码、登录名和 TOTP 密钥），敏感信息根据所应用的安全方案（AES‑256）保持加密状态；只有在应用程序中输入主密码才能解密。

该文件在用户设备上创建并保存。默认情况下，文件保存到 Documents 文件夹，但用户可以选择其他保存位置。

服务提供商不会收到此文件，不会存储它，也不会在任何阶段访问它。

导入只能通过 SecureKey 应用程序进行，用户必须输入主密码才能解密数据。

用户对导出文件的安全性负责。 建议保护文件免遭未经授权的访问：不要通过不安全的通信渠道发送，不要上传到公共存储，不要与第三方共享。

用户完全控制自己的数据：

• 只有在设备上的应用程序中输入主密码才能访问数据。
• 通过应用程序界面编辑和删除单个条目。
• 当从设备中删除应用程序时，所有历史和数据将被删除 — 在这种情况下，所有数据将从设备中永久删除。

服务提供商不提供数据恢复功能，不存储副本，也无法恢复丢失的数据。

个人数据主体权利的实现。 由于数据处理在用户设备本地进行，且服务提供商无权访问数据，以下操作由用户自行执行：

• 访问和编辑数据 — 通过应用程序界面；
• 删除单个条目 — 通过应用程序界面；
• 完全终止处理（删除所有数据）— 通过从设备卸载应用程序；
• 撤回处理同意 — 通过自行删除应用程序内的数据和/或卸载应用程序本身。

服务提供商不存储导出的文件，也无法根据用户请求对其执行操作。

应用程序不提供自动备份到服务器的功能。

如有必要，用户可以使用文件导出（参见第 4 节）作为在其设备之间传输数据的方式。

重要提示： 卸载应用程序时，所有数据将被永久删除。用户对数据安全负责（包括创建和存储任何本地副本和导出文件）。

数据安全取决于设备本身的安全性（屏幕锁定、防止未经授权的访问、没有 root 访问权限等）。服务提供商不对因设备被黑客攻击或丢失、或导出文件泄露而导致的数据泄露负责。

处理个人数据的法律依据是用户通过开始使用应用程序而授予的同意。

处理目的：

• 提供密码管理器功能（存储、搜索、生成、导出/导入）；
• 生成和显示用于双因素认证（2FA）的 TOTP 码 — 码基于设备上存储的密钥和当前时间在本地计算，无需任何数据传输；
• 确保应用程序按照其声明的功能运行。

处理的数据量仅限于用户自行输入并存储在应用程序中的信息。

本政策可能不时更新。服务提供商将通过更新此页面上的文本来通知您任何变更。建议您定期查看本隐私政策。继续使用本应用程序即表示您接受当前版本的政策。

如果您对隐私或应用程序的做法有任何疑问，请通过电子邮件联系服务提供商：support@znaetapps.ru。