Data Guardian — Privacy policy

This policy is for the Android app Data Guardian (package com.mekanix.passman), published by ToolsForTheMasses. Last updated: 18 August 2026.

Contact: cezar.lucan@gmail.com. Account and data deletion: Data Guardian account deletion.

What the app does

Data Guardian is a password manager. Your vault (logins, notes, and similar items) is stored on the phone in an encrypted database. A PIN and optional biometrics lock the app locally. They are not an online account.

Cloud Backup and Time Capsule are optional. You can use the app without signing in and without sending data off the device.

Data stored only on your device

Unless you use Cloud Backup or Time Capsule, this stays on the phone:

• The encrypted password database and any files you attach to entries
• The Database Key, PIN, and biometric settings
• App preferences, including a Time Capsule server URL if you enter one

We do not have access to the contents of a locked vault. Photos taken with the camera (if you use that feature) are stored in the local vault, not sent to us.

Data collected if you use Google features

If you sign in with Google for Cloud Backup and/or Time Capsule, the following may leave the device. None of this is required to use the local vault.

Email address

• Your Google account email — used to sign in, identify you on the Time Capsule server, and operate Drive backup.
• Recipient emails you type — Time Capsule stores them so a frozen snapshot can be shared with those Google accounts after the delay.

User IDs

The Google account id from Sign-In (the sub value) is stored on the Time Capsule server so we can recognise the same Google account on another phone.

Device or other IDs

A device identifier (Android ID, or a generated id if Android ID is unavailable) is sent to the Time Capsule server. The first phone for a Google account becomes the canonical device id. A later phone signed in with the same Google account keeps that original id and inherits existing capsules.

Files and docs

• Cloud Backup: an encrypted copy of a database you choose is uploaded to your Google Drive (for example under PassmanBkps).
• Time Capsule: a frozen encrypted snapshot and an INSTRUCTIONS.txt file (including the capsule password) are uploaded to your Drive (for example under PassmanTimeCapsule). File ids are stored on the Time Capsule server.

The live Database Key for the open vault is not uploaded. The capsule uses a separate password written only into INSTRUCTIONS.txt until share time.

How data is shared

• Google — Sign-In and Google Drive, to provide those features. Google’s own policies apply to data they process.
• Time Capsule recipients — if a capsule is released after the inactivity delay, Drive shares the snapshot and instructions with the Gmail addresses you listed. Those people then have the encrypted file and the capsule password.
• We do not sell your data. We do not use it for advertising, analytics products, or marketing.

Why we use this data

App functionality and account management only: optional Google sign-in, Drive backup, and Time Capsule (including identifying the owner across devices).

Where it is stored and for how long

• On the phone: until you delete the vault files or uninstall the app (a copy remains if you exported it elsewhere).
• Google Drive: until you delete those files in Drive. We do not delete your Drive files when you disable Time Capsule or request account deletion.
• Time Capsule server: owner email, Google user id, device ids, recipient lists, delay and heartbeat times, Drive file ids, and an encrypted Drive refresh token — until you disable each capsule and/or we process a deletion request. After a deletion request we aim to remove matching server records within 14 days. Email about the request, and any backups or logs, may be kept up to 30 days, then removed.

Security

Vaults on the device use encrypted database storage. Google Drive transfers use HTTPS. If you point Time Capsule at an HTTP server URL, metadata sent to that server (email, user id, device id, file ids, recipient list) is not encrypted in transit. Use HTTPS for that server if you need encryption in transit.

You are responsible for Database Keys, PIN, capsule passwords, and who you name as Time Capsule recipients.

Children

Data Guardian is not directed at children under 13. We do not knowingly collect data from children.

Your choices and deletion

You can:

• Use the app without Google, Cloud Backup, or Time Capsule
• Disable Time Capsule per database in the app (removes that capsule on the server; Drive files stay until you delete them)
• Remove app access in your Google account, and delete Drive folders such as PassmanTimeCapsule and PassmanBkps
• Request deletion of Time Capsule server records as described on the account deletion page

Uninstalling the app does not by itself delete Drive files or Time Capsule server records.

Changes

If this policy changes in a material way, we will update the date above. Continued use of Cloud Backup or Time Capsule after an update means you accept the revised policy for those features.