Pass GenPrivacy policy
Generated passwords, passphrases and your History are created and kept on your device. We cannot read them, and there is no Pass Gen vault on our servers to read them from. Leaving the default cloud backup switched off means nothing from this app ever reaches a server of ours.
Who we are
This policy covers the Pass Gen Android app, package
com.luckytools.pass_gen, as published on Google Play by Cloudy NI (sole
trader), together with the cloudyni.com pages that support it: this policy, the terms of use and the data deletion
page.
It describes the build that is on Google Play now. Where a feature is optional this policy says so, and where the app keeps nothing on our servers it says that too. We do not sell personal data.
What stays on your device
The following is written into the app's own private storage on your phone and is never sent to us:
- Generated passwords and passphrases you choose to keep in History.
- Your generation settings, word lists and theme.
- The locally cached Premium entitlement for this install.
Clearing the app's storage or uninstalling the app deletes all of it at once, without contacting us. The data deletion page lists the steps.
What the app can access
The app asks Android for as little as it can. This is the complete list for the published build:
- None — the app requests no dangerous Android permissions
An item above is used only while the feature that needs it is running, and nothing beyond this list is accessed by the app.
Information the app handles
This is the full picture for the published build: everything the app records, processes or transmits, and where it goes.
- Generated passwords and passphrases, and your saved history. These are created on your device and stay on your device. They are never transmitted to us and we cannot see them.
- Settings. Length, character classes, word-list and separator preferences, theme and the app-lock setting.
- An optional account email, only if you create a cloud backup account.
- Diagnostics and analytics described in the analytics section below.
- Advertising data processed by Google AdMob on the free tier.
- Correspondence you send to support.
Optional encrypted cloud backup
Pass Gen generates passwords on your device. There is no Pass Gen vault in the cloud and no sign-in required. An optional, off-by-default encrypted backup is available if you want your settings and saved history to survive a lost phone: it is encrypted on your device before upload, so the server holds a blob it cannot read. Authentication and storage for that backup are handled by Supabase (our processor, EU servers, eu-west-2).
If you choose to use that optional feature, these rules apply:
- The backup is off by default and the app is fully usable without it.
- Anything in a backup is encrypted on your device before upload. The server cannot read it, and neither can we.
- A forgotten backup password cannot be recovered by us or by anyone else, and the backup cannot be decrypted without it. There is no master key, no recovery code and no reset.
- You may delete the backup account and its encrypted blob at any time — see the data deletion page. Verified deletions are completed within 30 days.
Deleting the account deletes the stored backup with it. Both routes — the in-app one and the email one — are set out on the data deletion page.
Advertising
The free tier shows advertising served by Google AdMob. Google and its partners may process your advertising ID, IP address and device information to serve and measure ads. Where the law in your region requires consent before personalised advertising, that request is made before personalised ads are served. You can reset or delete your advertising ID in Android settings at any time. Advertising has no access to the passwords you generate.
Advertising is served and measured by Google and its partners under Google Privacy Policy and AdMob & privacy. You can reset or delete your advertising ID, and turn personalised advertising off, in Android Settings → Privacy → Ads.
Buying a paid product removes advertising for as long as that product is active; the next section explains what we learn from Google Play.
Analytics, diagnostics and crash reports
The app reports anonymous usage, performance and crash information through the Google services we configure:
- Google Analytics for Firebase (anonymous usage analytics)
- Firebase Crashlytics (crash and error diagnostics)
- Firebase Performance Monitoring
- Firebase Remote Config
- Firebase Cloud Messaging (push notifications)
Those reports carry an app-instance identifier rather than your name, and Google handles them for us under Firebase privacy and security. They are diagnostic: we use them to find crashes and to see which features are used, not to identify you.
We use Google Analytics for Firebase for anonymous usage analytics, Crashlytics for crash and error reports, Performance Monitoring, Remote Config for feature switches, and Cloud Messaging for push notifications if you allow them. Analytics events describe app behaviour (for example “password copied”); they never contain a generated password, a passphrase or your History, and they do not identify you by name. You can turn notifications off in Android settings at any time.
Purchases and subscriptions
Anything you buy in Pass Gen is sold through Google Play Billing. Google is the merchant of record, so your payment method, billing address and the amount you paid are held by Google and never shared with us.
To unlock a paid feature the app asks Google Play whether the product is active. The product identifiers are on the terms of page, and the price is always the amount shown on the Google Play purchase sheet when you confirm it. See Google Play Terms of Service and Google Privacy Policy.
A subscription is cancelled in Google Play, not by deleting anything here, and deleting your data does not cancel it.
How long we keep things
Everything the app stores stays on your device until you clear its storage or uninstall it. Support email is kept only while the query is open and is deleted on request, within 90 days.
A cloud copy is kept only for as long as the account exists; deleting the account, or asking us to delete it, erases it.
Google keeps purchase records and advertising data under its own policies, as the store and as an advertising provider rather than on our behalf.
Your rights
Under UK GDPR you can ask us for a copy of your information, ask us to correct or erase it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent where consent is what we rely on.
Most of what this app holds is on your device, so you are the fastest route to erasure: delete the entries, clear the app's storage, or uninstall the app. Where an account exists, deleting it erases the copy we hold: see the data deletion page.
Email support@cloudyni.com for any of these. We answer within one month and we do not charge for a first request. You can also raise a complaint with the ICO if you are unhappy with how we have handled your information.
How we protect your data
Data kept by the app sits in its private app storage, inside Android's application sandbox, protected by your device lock and by Android's file-based encryption. Anything the app sends or receives travels over HTTPS.
Cloud data is stored on EU infrastructure by our processor, transferred over TLS, and reachable only with the credentials that belong to the account.
No system is perfect. If we learn of a breach that puts your information at risk we will tell you and the ICO as UK GDPR requires; where we hold nothing about you, there is nothing for a breach to expose.
Changes to this policy
This page was last updated on 30 September 2026, and it describes the build that was on Google Play on that date. If a change affects what the app collects or where it goes, we update this page and the date above before the change ships. If the change is significant we will say so on the app's Google Play listing.
Contact us
Cloudy NI (sole trader) is a sole trader based in Northern Ireland, registered with the ICO for data protection under reference ZC222090.
Email support@cloudyni.com for privacy questions, a purchase problem or a deletion request. We answer data-protection requests within one month and deletion requests within 30 days.
The exact steps for deleting data, and what to send us if you cannot use them, are on the data deletion page.