Privacy Policy

1. Introduction

FortLock is a local-first password manager. All data you save in FortLock is stored exclusively on your device. This policy explains what that means in practice, what leaves your device, and what does not.

2. Information We Collect

We do not collect, transmit, or store any personal data on our servers. We operate no accounts, no analytics profiles, and no user database.

All credentials, passwords, and 2FA secrets are encrypted with AES-256-GCM and stored locally on your device only. The encryption keys are derived from your master password and never transmitted anywhere.

3. Service Logos

To display brand logos alongside your saved entries, FortLock makes requests to Clearbit (logo.clearbit.com) and the Google Favicon Service (google.com/s2/favicons).

These requests disclose the domain names of services you have saved to those third parties. No account information, usernames, or passwords are included in these requests.

4. Camera Usage

The camera is used solely to scan QR codes for adding 2FA authenticator accounts and for the Web Bridge feature. No images or video are stored or transmitted.

5. Biometric Data

FortLock uses device biometrics (fingerprint or Face ID) only for local authentication. Biometric data never leaves your device and is handled entirely by the operating system. FortLock receives only a success or failure result, never the biometric itself.

6. Web Bridge

The FortLock Web Bridge (fortlock-web.vercel.app) is a relay service that temporarily holds an encrypted session for up to 60 seconds to facilitate password transfer from your phone to your desktop browser.

No passwords are stored. Sessions are single-use and auto-expire: once your browser receives the transfer, or once 60 seconds have passed, the session is discarded.

7. Third-Party Services

FortLock relies on the following providers:

• ·Expo — app framework. Privacy policy
• ·Vercel — web hosting. Privacy policy

8. Children's Privacy

FortLock is not directed at children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We will notify users of material changes by updating the effective date at the top of this page.

10. Contact Us

Questions about this policy can be sent to support@airylio.com.