Privacy Policy - Passwords (密码库)

1. Overview & Zero-Knowledge Commitment (概述与零知识承诺)

Passwords ("the App", package ID pub.wxj.passwords, official website https://wxj.pub) is an end-to-end encrypted, zero-knowledge password vault. We designed Passwords so that neither the developer nor any server can ever access, read, or recover your Master Password or plaintext credentials.

All key derivation (Argon2id, 64 MB memory cost, 3 iterations, 4 lanes) and authenticated envelope encryption/decryption (AES-256-GCM) occur 100% locally in your device's volatile memory (RAM) before any data is transmitted.

中文说明： 密码库（Passwords，包名 pub.wxj.passwords） 是一款基于零知识证明（Zero-Knowledge）与数字信封架构的端到端加密密码管理工具。所有主密码派生（Argon2id）及数据加解密（AES-256-GCM）均 100% 在您设备本地内存中完成，服务器与开发者在任何情况下均无法获知您的主密码或任何明文凭证。

2. Information We Collect and Process (我们收集与处理的数据)

To provide cloud synchronization of your encrypted vault across devices, the App processes only the minimum required data:

Account Identifier (User ID): The username you choose when registering an account.
Cryptographic Parameters: Random cryptographic salts (salt, client_salt), an Argon2id authentication hash, and your wrapped envelope key (encrypted_vault_key).
Encrypted Vault Records: Unreadable AES-256-GCM ciphertext blobs and 96-bit initialization vectors (nonce). The server cannot decrypt titles, domains, usernames, or passwords inside these blobs.

What We Never Collect:

We NEVER collect or transmit your plaintext Master Password, Master Encryption Key (MEK), or raw Vault Key (DEK).
We NEVER collect precise or coarse geolocation, contacts, SMS, call logs, photos, microphone, or camera data.
We NEVER integrate third-party advertising SDKs, behavioral trackers, or data brokers.

中文说明： 为实现跨设备加密密码库同步，服务端仅存储您注册时设置的用户名、随机加密盐值、封装后的信封密钥密文以及经 AES-256-GCM 加密后的密文块。我们绝不收集您的明文主密码、解密密钥、地理位置、通讯录、相册或任何广告追踪标识。

3. How We Use & Share Your Data (数据使用与共享说明)

App Functionality Only: Your account identifier and encrypted vault blobs are used strictly to authenticate your session and synchronize your encrypted vault.
No Third-Party Sharing or Selling: We do not sell, rent, trade, or share any user data with third parties, advertisers, or analytics platforms.
Encryption in Transit & at Rest: All network communication between the App and https://wxj.pub is encrypted via HTTPS/TLS, in addition to client-side AES-256-GCM end-to-end encryption.

中文说明： 您的账号标识与加密密文仅用于身份验证及密码库云端同步。我们不会向任何第三方出售、出租或共享您的数据。所有网络传输均通过 HTTPS/TLS 加密，且数据本身已在客户端完成 AES-256-GCM 端到端加密。

4. Data Retention & Account / Data Deletion (数据保留与账号及数据删除方式)

You retain full control over your data at all times:

Instant In-App Record Deletion: You can permanently delete any individual encrypted credential at any time directly inside the App by tapping the Delete button on the credential card. Deleted records are immediately purged from the cloud database.
Complete Account & Cloud Vault Deletion: If you wish to permanently delete your entire account (Username / User ID) and all associated encrypted vault data, you may:
1. Delete all encrypted entries directly within the App while signed in; and/or
2. Submit an account deletion request via email to admin@wxj.pub with your registered username.
Upon receiving an account deletion request, your account record, cryptographic salts, and all associated ciphertext blobs are permanently and irreversibly erased from our server within 7 business days.

中文说明： 您可以随时在 App 内点击任意条目上的「删除」按钮立即从云端彻底销毁该加密记录；如需彻底注销并删除整个账号及全部关联密文数据，可发送邮件至 admin@wxj.pub 注明您的用户名申请删除，我们将在收到请求后的 7 个工作日内从服务器永久清除该账号及所有加密数据。

5. Children's Privacy (儿童隐私保护)

The App is intended for general users aged 18 and above and is not directed to children under the age of 13. We do not knowingly collect personal information from children.

中文说明： 本应用面向成年用户设计，不针对 13 岁以下儿童，也不会主动收集儿童的任何个人信息。

6. Changes to This Privacy Policy & Contact Us (政策变更与联系方式)

We may update this Privacy Policy from time to time. Any updates will be posted on this page with an updated effective date.

If you have any questions about this Privacy Policy, security practices, or data deletion requests, please contact us at:
Website: https://wxj.pub
Email: admin@wxj.pub