Your vault never reaches us.

How PowerSafe handles your data, in the app, between your devices, and on this website.

Effective October 11, 2026

Who we are

PowerSafe is made by Unidatum Integrated Products Limited, Venture Hub, 136 Capel Street, Dublin D01 T2C9, Ireland, the controller for the little personal data this policy describes, together with Unidatum Integrated Products LLC in the United States.

For anything about privacy, write to privacy@unidatum.eu. We have not appointed a statutory Data Protection Officer; that address handles every request.

In short

Your vault never reaches us: PowerSafe has no Unidatum server, no account and no cloud. Your logins are stored on your devices and travel only between the devices you pair.
No tracking: The app has no analytics, crash reporting, advertising or update checks, and sends nothing to Unidatum or to anyone else.
What we do see: When you download PowerSafe from this site, a count of the download (product, version, country, browser) and Cloudflare's bot check. That is all.

What PowerSafe keeps on your device

Your vault: each login, its title included, sealed with XChaCha20-Poly1305 under a random 256-bit vault key. That key is itself sealed under a key derived from your master password with Argon2id. We never see your master password and cannot reset it or recover a vault without it.

Beside the vault: the device's settings (the theme), the list of devices you have removed, and, if you turn it on, the biometric unlock key described below.

On Android the vault sits in a folder that Android's backup never copies, and on iPhone it is marked excluded from iCloud backup. On Windows and macOS it is in your user folder (%AppData%\PowerSafe, ~/Library/Application Support/PowerSafe), where your own backup software may include it, sealed as it is.

PowerSafe writes a diagnostic log to the system log (Android's logcat, the console on a computer) and nowhere else. It records events such as which paired device synced and which website a login was filled on, never a password, and never leaves the device.

What travels between your devices

Your devices sync directly with each other, over your local network or a Tailscale network, on TCP port 27930 (and 27931 while a new device is showing its pairing code). PowerSafe does not use discovery services, relays, STUN servers or any server of ours to find or reach them; a device knows only the addresses the pairing link gave it.

What crosses is your vault as sealed: a device without the vault key cannot read it. The connection itself is encrypted (X25519 key agreement between the devices' own keys, then AES-256-GCM) once both ends support it; the first contact while pairing can be unencrypted, but what crosses then is already sealed.

Some things are not secret from your other paired devices, or from someone watching your network while devices first pair: each device's name (on a computer, its name on the network), that a vault exists and how many entries it holds, and when its master password last changed.

A pairing link (the QR code or link shown when you add a device) carries the vault key. Treat it like the master password: anyone who has it can join the vault. It expires after a day.

Camera, biometrics, clipboard

Camera: Used only while you scan a pairing code or read a password from another screen. Frames are read on the device, by text recognition built into the app, and are neither saved nor sent anywhere; a reading is wiped when you leave the screen or the vault locks.
Fingerprint, face, Windows Hello: Handled by your device's operating system. PowerSafe never receives biometric data: it asks the system to release a key it keeps in the Android Keystore, the iOS Keychain or Windows Hello, bound to this device. Turning biometric unlock off deletes that key.
Clipboard: PowerSafe writes to the clipboard only when you tap Copy, and clears a copied password after 30 seconds. It reads the clipboard only when you tap Paste link.
Network: Used only to reach your own paired devices, as above.

The browser extension

The PowerSafe browser extension makes no network requests. When you open it, it passes the current page's address to the PowerSafe app on the same computer, which answers with the matching logins' titles and usernames; a password is passed only when you choose a login to fill, and only if its website matches the page. It has no access to pages you have not opened it on, and stores nothing.

This website and downloads

This site is static pages served by Cloudflare. It sets no cookies and runs no analytics. Cloudflare, as our hosting provider, processes the requests it serves, including your IP address, under its own privacy policy (cloudflare.com/privacypolicy).

Before a download, the download page runs Cloudflare Turnstile, a check that you are a person and not a bot; Cloudflare sees your IP address and browser signals to decide. We then count each download: the product, version and file, whether it completed, the country Cloudflare places the request in, and your browser's user-agent string. We do not store your IP address with it. These counts are kept for three months.

If you install PowerSafe from Google Play, the App Store or the Chrome Web Store instead, that store handles the install under its own privacy policy, and gives us only the aggregate statistics stores give every developer.

Deleting your data

Your vault is yours to delete. Deleting a login deletes it on every paired device. Removing a device from the vault stops the others syncing with it. Uninstalling PowerSafe on a phone deletes that phone's copy of the vault; on a computer, delete the folder named above. A vault on devices you have not removed stays on them.

We hold nothing of your vault to delete. The download counts are not tied to you, and expire after three months.

Your rights

Wherever you live, you may ask us what personal data we hold about you, and to correct or delete it. Under the GDPR you also have the rights to restrict or object to processing and to portability; under California's CPRA, to know, delete, correct and opt out of sale or sharing (there is none to opt out of). Write to privacy@unidatum.eu: we answer within 30 days (45 under the CPRA), and may need to confirm who you are first. In practice we hold almost nothing that identifies you.

In the EU you may complain to the Irish Data Protection Commission (dataprotection.ie), our lead supervisory authority, or to the authority where you live or work; in the UK, to the Information Commissioner's Office.

Children

PowerSafe is not directed at children under 13, and we do not knowingly collect personal data from them; the app collects none from anyone.

Changes

If PowerSafe starts handling data differently, we will update this page before the version that does so is released, and change the date below.

Questions: privacy@unidatum.eu