Privacy Policy

Last updated: 29.09.2024

Introduction

This Privacy Policy describes how PassTransfer (hereinafter referred to as "the App") collects, uses, and protects users' personal data. We take data security seriously and are committed to ensuring its confidentiality in accordance with applicable legal requirements.

What Data is Collected

  • Personal Data We do not collect or store users' personal data such as name, email address, phone number, etc.
  • Device Data To ensure the functionality of the app, we may collect the following data:
    • Device identifiers, such as a unique device identifier.
    • Technical data necessary for ensuring a secure connection.
  • Camera The app uses your device's camera exclusively for reading QR codes required for secure connection to your PC. We do not store or transmit images or data related to the use of the camera.
  • Encryption Data The app uses an encryption key provided by the user to encrypt data before it is transmitted via an intermediary server. This key is neither stored nor transmitted to third parties. Data is encrypted on the user's device and can only be decrypted by the user on their PC.

Data Collection and Storage

All personal information is stored exclusively in the database of the user's device where the PassTransfer app operates and is not intended to be shared with third parties or the developer. Data storage on the device is carried out in encrypted form and cannot be read without entering the primary password and unlocking the device. Security of key storage is ensured through the Android Keystore system and built-in Android encryption libraries. In case of loss of the primary password or device malfunction, the data cannot be recovered. The developer is not responsible for backup and its subsequent storage. However, the developer may provide additional tools to transfer and back up data from the device to an external storage device.

Data Transfer

The app provides a mechanism to transfer information to another external device for personal use. In this case, the user initiates the connection through the app and consents to the data transfer. The PassTransfer website acts as a proxy server for the connection between the user's mobile device and the external device. The proxy site serves as a communication intermediary, does not store transmitted information, and does not retain logs with personal data. Data transfer security is ensured through asymmetric RSA encryption. Public and private keys are generated on the client side of the external device and are used for the duration of one session, after which they are destroyed. If the user initiates a new connection, a new key pair is generated. Communication between the client and the proxy site is carried out over a secure https protocol.

After receiving and decrypting information on the external device, the developer is not responsible for the subsequent storage and use of the received data. To ensure that the data is not accessible to third parties, the user must ensure that the external device is free from viruses and that unauthorized individuals do not have access to this device. Do not store important information in open form, use antivirus software with an up-to-date database, and set a strong password for accessing your device (or use biometric authentication).

Third Parties

  • Third-Party Services The app does not use third-party services to collect or process users' data.
  • Data Disclosure We do not share users' personal data with third parties, except in cases provided by law (e.g., upon request from government authorities).

Required Permissions

For the app to function on the Android system, the following permissions are required:

  • Internet access (only during app use). This is needed for secure transmission of information to an external device.
  • Camera access (only during app use). This is necessary to initiate a connection to an external device.
  • Internal storage access (only during app use). This is required to store information.

If a web browser is used on the external device to initiate data transmission, it may be necessary to allow access to the clipboard of the external device to save received information.

User Rights

Users have the following rights regarding their data:

  • The right to access their data.
  • The right to delete their data (if such data is stored).
  • The right to withdraw consent to the use of their data.

Disclaimer and Limitations

  • Disclaimer

    The app is provided "as is" and "as available" without any warranties, either express or implied, including but not limited to warranties of performance, fitness for a particular purpose, or non-infringement of third-party rights. We do not guarantee that the app will always be available, operate without errors, or that any app errors will be fixed.

  • Limitation of Liability

    Under no circumstances shall the app developer, its affiliates, employees, or contractors be liable for any direct, indirect, incidental, special, or consequential damages (including but not limited to loss of data, loss of profit, or business interruption) arising from the use or inability to use the app, even if the possibility of such damages was previously reported.

  • Responsibility for Data Security

    We make every effort to ensure the security of transmitted data using modern encryption methods. However, data transmission over the internet cannot be absolutely secure. The user understands and agrees that they are responsible for the protection of data on their device and PC, as well as for keeping the encryption key confidential.

Links to Third-Party Resources

The app may contain links to third-party websites or resources. We do not control and are not responsible for the content, privacy policies, or practices of these third-party resources. Use of third-party sites is at the user's own risk.

Updates

We reserve the right to make changes to this section without prior notice. It is recommended to periodically review the Privacy Policy to stay informed of any changes. Your continued use of our Services confirms your acceptance of our updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: