Privacy Policy
PassQ Privacy Policy
This policy describes how PassQ handles information in the iOS app and, when used, the optional hosted
PassQ Pro service at passq.takecontrolinc.com.
1. Overview
PassQ is designed so that sensitive vault contents are encrypted on the client. PassQ does not send your master passphrase to PassQ Pro. PassQ Pro is designed to store encrypted vault blobs, public keys, membership records, device registrations, and related service metadata rather than plaintext passwords.
Plain-language summary: if you use PassQ as designed, your passwords and private vault keys stay encrypted from the server’s point of view.
2. Data Stored On Your Device
PassQ stores the following locally on your iPhone or iPad:
- Vault entries such as titles, usernames, passwords, notes, URLs, and custom fields.
- Encrypted vault blobs and wrapped key material used for offline access.
- Device-specific secrets and keys used to authenticate the device and protect local vault access.
- Optional local preferences such as password generator settings and presentation state.
If you enable Face ID, Touch ID, or device passcode protection, PassQ uses Apple’s local device authentication frameworks to protect access to local vault secrets. Biometric data itself is not provided to PassQ.
3. Data Processed By PassQ Pro
If you choose to use PassQ Pro, the hosted service may process the following categories of information:
| Category | Examples | Purpose |
|---|---|---|
| Account information | Email address, optional display name, account role | Sign-in, account administration, invite delivery, and service communication |
| Encrypted vault sync data | Encrypted blobs, wrapped key blobs, public keys, recipient metadata | Sync, device recovery, and sharing |
| Membership and invite data | Vault memberships, pending invites, accepted share actions | Family & Friends sharing and vault administration |
| Device registration data | User IDs, device IDs, public-key fingerprints, authentication records | Authorize trusted devices and validate sync requests |
| Operational diagnostics | Timestamps, server-side logs, delivery status for email verification or invites | Operate, debug, secure, and improve the service |
PassQ Pro is not intended to receive plaintext passwords, your master passphrase, or private vault keys during ordinary use.
4. Community And Self-Hosted Servers
PassQ can also connect to compatible community or self-hosted servers chosen by the user. Those servers are not operated by TakeKontrol, Inc. unless explicitly identified as PassQ Pro.
If you connect to a third-party server, that operator may have different logging, retention, and privacy practices. Review that operator’s policy separately before using it.
5. Payments And Subscriptions
If PassQ Pro is offered as a paid subscription for hosted sync, sharing, or similar convenience features and the purchase is made through Apple’s App Store, Apple processes the transaction. TakeKontrol, Inc. does not receive your full payment card number from Apple.
Additional billing or tax information may be processed by Apple under Apple’s own privacy terms.
6. Retention
- Local device data remains on your device until you delete the app’s local vault data or remove the app.
- PassQ Pro account and encrypted sync records may remain until deleted from the service, subject to backups, logs, and legal obligations.
- Email verification and invite delivery logs may be retained for security, abuse prevention, and operational troubleshooting.
7. Your Choices
- You can use PassQ locally without PassQ Pro.
- You can choose your own compatible community server instead of PassQ Pro.
- You can remove local vault data from the app by resetting the vault on the device.
- You can remove device access and adjust sharing through in-app settings when those features are available.
This policy may change as PassQ evolves. When that happens, the updated version should be posted at this URL.