Skip to main content

Privacy Policy

Last updated: January 6, 2026

Introduction

LockYit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use our password manager and vault application.

The key principle: LockYit is designed with privacy at its core. Your vault data is encrypted on your device and we cannot access it.

Information We Collect

Account Information

When you create a LockYit account, we collect:

  • Email address — Used for account identification and recovery

We do NOT collect or store:

  • Your master password
  • Your vault contents
  • Your encryption keys

Vault Data

All vault data (passwords, notes, documents, etc.) is encrypted locally on your device using AES-256-GCM encryption before any processing occurs. We use zero-knowledge architecture, meaning:

  • Your data is encrypted with keys derived from your master password
  • Your master password never leaves your device
  • We cannot decrypt or access your vault contents
  • If you lose your master password and recovery key, your data cannot be recovered by anyone

Local Storage

LockYit is an offline-first application. All your data is stored locally on your device. We do not have access to this data.

How We Use Your Information

We use your email address solely for:

  • Account identification
  • Account recovery verification
  • Essential service communications

We do NOT:

  • Sell your information to third parties
  • Use your data for advertising
  • Share your information with data brokers
  • Track your usage for analytics purposes

Data Security

We employ industry-standard security measures:

  • AES-256-GCM encryption — Military-grade encryption for all vault data
  • Zero-knowledge architecture — We cannot see your data
  • Local-first storage — Data stays on your device
  • Secure key derivation — PBKDF2/Argon2 for password hashing

Future Cloud Services

In the future, we may offer optional paid cloud synchronization services. If you choose to use these services:

  • All data will remain end-to-end encrypted
  • We will still not have access to your vault contents
  • Cloud sync will be entirely optional
  • You can continue using LockYit offline without cloud services

We will update this Privacy Policy before launching any cloud services.

Your Rights

You have the right to:

  • Access — Export all your vault data at any time
  • Deletion — Delete your account and all associated data
  • Portability — Export your data in standard CSV format

Children's Privacy

LockYit is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected]