Privacy Policy

1. Introduction

This Privacy Policy explains how GBpass collects, uses, and protects the personal data of users accessing the Application globally.

2. Personal Data We Collect

GBpass is built with encryption that prevents us from viewing your data. This means we cannot access, view, or decrypt your vault data, master password, or stored credentials.

We may collect:

• Email address (for account registration and support)
• Basic device information (such as app version and operating system) for service stability
• Subscription status (via Google Play or Apple App Store)
• Messages sent to customer support

We do not collect:

• Master passwords or plain-text passwords
• Decrypted vault contents
• Precise location data
• Payment card information
• Advertising identifiers

The Application does not track users across apps or websites owned by other companies. No automated decision-making or profiling is performed on your personal data. Where consent is required by law, you may withdraw it at any time without affecting the validity of any processing done before the withdrawal.

3. Purpose of Data Use

We use personal data to:

• Provide and maintain the Application
• Manage subscriptions and user access
• Respond to inquiries and support requests
• Improve system stability and performance
• Enable secure storage and retrieval of your credentials

4. Payments & Billing

All subscription payments are handled by the applicable app store (such as Google Play or Apple App Store). The Operator does not store or have access to payment card data.

5. Data Sharing & Disclosure

We do not sell, monetize, or use personal data for advertising. Data may only be shared with:

• Google Play or Apple App Store (for billing and subscription verification)
• Essential service providers strictly needed for app operation

Encrypted vault data is never shared with third parties except as technically necessary to provide the Service.

6. Data Retention

Personal data is kept only for as long as:

• Your account remains active, or
• It is needed to provide the Service

You may request deletion by contacting us via email. Encrypted vault data is permanently deleted when your account is deleted, subject to technical limitations. Support messages may be kept for a reasonable period to resolve inquiries and meet legal requirements. Where required by law, deletion requests will be completed within the legally required timeframe.

7. Your Rights

All requests are handled via email.

8. Data Security

We use reasonable security measures, including encryption and access controls, to protect your personal data and stored credentials. However, no method of data transmission or storage is completely secure.

9. International Data Transfers

Data may be processed on servers located outside your country. Appropriate safeguards are applied to protect your data during any such transfer.

10. Policy Updates

This Privacy Policy may be updated from time to time. Continued use of the Application means you accept the updated policy. Where required by law, we will notify you of significant changes.