PassTowerPrivacy policy
Effective October 15, 2026
This policy explains what the PassTower app and passtower.com (“PassTower”, “we”) do with your information. In short: your vault is encrypted on your device, and we never receive it, your master password or your pass phrase. We only hold your email address if you use the family plan.
Your vault
Your passwords, passkeys, 2FA keys, notes and other items are kept in a vault on your device. The vault is encrypted with AES-256-GCM, using a key protected by your master password and by your 12-word pass phrase. Your master password and pass phrase never leave your device. We cannot read your vault, and we cannot reset your master password for you.
The vault leaves your device only when you choose:
- Dropbox sync: if you connect Dropbox, the encrypted vault is saved in the app's own folder in your Dropbox (Apps/PassTower) so your other devices can sync. PassTower can only use that folder, not your other files. Dropbox's handling of your account is covered by Dropbox's privacy policy.
- Backups: backup files you save or share are encrypted the same way.
Family plan
The family plan is optional. If you sign in to it, we keep the following on Google Firebase (Firestore, Authentication and Cloud Functions, run by Google):
| Data | Why | How long |
|---|---|---|
| Your email address | To sign you in with an emailed code, and so your family can invite and find you | Until you delete your family sign-in |
| Sign-in codes (stored only as a one-way hash) | To check the 6-digit code you enter | Up to 10 minutes; deleted once used |
| Your vault's public identity key | For upcoming family features such as emergency access. It is a public key: it cannot open your vault | Until you delete your family sign-in |
| Family membership and invitations (emails of the people in your family, who invited whom, and when) | To run the family plan | Until you leave the family or delete your family sign-in; invitations expire after 14 days |
We send emails only for the family plan: sign-in codes, invitations, and a security alert if your pass phrase is used to reset your master password. They are sent from no-reply@passtower.com. We don't send marketing email.
What stays on your device
- Autofill: when you use PassTower to fill a login, Android shows PassTower the app or website and its login fields. PassTower uses this only to suggest and fill your logins, and to offer to save new ones. It is not stored or sent anywhere.
- Firefox helper (accessibility service): if you turn it on, PassTower reads the website address and the login fields in Firefox, only to fill your logins there. It doesn't read other apps, and nothing it reads is stored or sent anywhere.
- Camera: used only to scan 2FA QR codes, when you choose to. Images are not saved or sent.
- Fingerprint and face unlock: handled by your device. PassTower never receives your fingerprint or face data.
- Your PIN isn't stored. Together with a secret kept in your device's secure storage, it unlocks your vault on that device only.
What we don't do
- No ads, no analytics, no tracking.
- We don't sell or share your information.
- We don't collect your contacts, location, photos or files.
Other services
Google Play installs and updates the app, and the app asks Google Play whether an update is available. Google Firebase runs the family plan and this website, Resend delivers our emails, and Dropbox stores your encrypted vault if you choose to sync. These services process technical information such as your IP address to provide their service, under their own privacy policies.
This website
passtower.com only describes the app. It doesn't store any vaults or passwords, has no sign-in or forms, and uses no cookies, analytics or trackers. PassTower will never ask you to enter your master password or pass phrase on a website.
Security
Data is sent over encrypted connections (HTTPS/TLS). Your vault is encrypted before it leaves your device, so a copy in Dropbox or in a backup can't be read without your master password or pass phrase. PassTower also blocks screenshots of its screens and locks itself when you leave it.
Your choices and rights
- Delete your family sign-in (PassTower's only account): in the app, go to Settings → Family → Delete family sign-in, or see Delete family sign-in. Your vault isn't affected.
- Delete your vault: uninstall PassTower, and delete the Apps/PassTower folder in your Dropbox if you used sync.
- Access or correct your data: email us at the address below.
Children
PassTower is not directed at children under 13, and we don't knowingly collect information from them.
Changes
If this policy changes, we'll post the new version here with a new effective date.
Contact
Questions about privacy: support@passtower.com