Privacy Policy

Last updated: October 18, 2026

SafeNuvem is a password manager for iPhone, iPad, Mac, Windows, Android, Chrome and Safari, made by an independent developer ("we"). This policy explains what happens to your information when you use it.

The short version: we never see your passwords or any other personal information. SafeNuvem has no servers and no accounts of its own. Your vault is encrypted on your device and stored in your own Google Drive, and only you hold the key.

What we collect

Nothing. We don't run servers, so no information about you, your vault or how you use the app is sent to us. The apps contain no analytics, advertising or tracking code.

Your vault

Your logins, notes, two-factor codes and other entries are encrypted on your device before they are saved anywhere, using AES-256-GCM with a key derived from your master password by Argon2id.
Your master password and recovery key never leave your device and are never stored in readable form. We can't see them, reset them, or recover your vault without them.
A copy of the encrypted vault is kept on each device you use, so the app works offline.

Google Drive and Google sign-in

To sync, you sign in with your Google account. The app asks Google only for permission to use its own hidden app folder in your Drive (the drive.appdata permission) and for your basic profile (name and email address) so it can show which account is connected.
The app cannot see, read or change any other file in your Google Drive.
The only thing the app stores in Drive is your encrypted vault file. Google can see that the file exists and its size, but not what is inside.
Your Google sign-in token and email address are stored only on your device, in the system's secure storage, and are used only to sync your vault. They are never sent to us or to anyone else.
You can disconnect the app at any time at myaccount.google.com/connections. Deleting the app's data from Google Drive (Drive settings → Manage apps) removes your synced vault.

SafeNuvem's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Face ID, Touch ID, Windows Hello and fingerprint unlock

If you turn on biometric unlock, your fingerprint or face data never reaches the app; your operating system checks it. The app only keeps a protected copy of your vault key in the device's secure hardware or keychain, and in the browser extension's local storage protected by a passkey. On the browser extension you are asked for your master password again every 14 days.

Website icons

To show a website's icon next to a saved login, the app downloads the icon directly from that website (for example example.com/favicon.ico). That website can see an ordinary request from your device, as it would if you visited it. No third-party icon service is used, and nothing about your vault is sent with the request.

Autofill, clipboard, camera and imported files

Autofill and the browser extensions read the login form on the page you're on only to fill or save your login, on your device.
Passwords you copy are cleared from the clipboard after a short time.
The camera is used only when you scan a QR code to add a two-factor code; images are not saved.
Files you import from other password managers are read on your device and not uploaded anywhere except, once encrypted, as part of your vault.

Information collected by app stores and operating systems

Apple, Google, Microsoft and your browser may collect information under their own privacy policies, for example download counts or crash reports you agree to share. If you agree to share crash reports with developers, we may see anonymous crash details through the store, which we use only to fix bugs.

Children

SafeNuvem is not directed at children under 13, and we don't knowingly collect information from anyone, including children.

Your choices and deleting your data

All your data is under your control. Delete the app to remove it from a device, and delete the app's data from Google Drive to remove your synced vault. Because we hold none of your data, there is nothing for us to delete or export on request.

Changes to this policy

If this policy changes, we'll update the date at the top and describe important changes in the app's release notes.

Contact

Questions: support@safenuvem.com