KASA Password Manager – Privacy Policy v1.0

Last updated: June 2026

The English version is the primary version. Translations are provided for convenience.

1. Introduction

KASA Password Manager is built around a simple principle:

Your data belongs to you.

KASA is designed to help you manage passwords, notes, attachments, and other sensitive information while keeping that data under your control.

This Privacy Policy explains how KASA handles your data, what information remains on your device, and which optional features may involve limited interaction with external services.

2. Privacy-First Approach

KASA is designed to minimize data collection and maximize user control.

KASA:

The purpose of KASA is not to collect user data.

The purpose of KASA is to help users securely store and manage their own information on their own devices.

3. Data Stored on Your Device

KASA stores vault data locally on your device.

Depending on how you use the application, this data may include:

KASA does not upload the contents of your vault to KASA-operated servers because KASA does not operate a vault synchronization service.

4. Encrypted Vault and Attachments

Vault data stored by KASA is protected using encryption.

Images, documents, and other supported files attached to records are also stored in encrypted form.

KASA is designed to keep sensitive information protected on the device where it is stored.

5. Backups and Exports

KASA allows users to create encrypted backups.

When a backup is created:

The security of a backup depends on the strength of the backup password chosen when the backup is created. For this reason, it is always recommended to use a strong backup password.

KASA cannot recover lost backup passwords because backup encryption is controlled only by the user.

6. Local Processing and Optional Online Features

KASA is designed to perform vault operations on your device.

Passwords, notes, attachments, and backup contents are not transmitted to KASA-operated servers.

KASA includes built-in icons for many commonly used websites and services. As a result, icons are often displayed without requiring an internet connection.

When the optional Dynamic Favicon feature is enabled by the user, limited internet access is used to retrieve icons that are not available in the built-in icon collection. This feature is disabled by default and only operates when enabled by the user.

Tapping website links, email addresses, or similar links stored in records may open the appropriate external application. These actions are initiated only by the user.

7. Google Play Billing

KASA uses Google Play Billing to provide optional premium features.

Purchases are processed by Google Play.

KASA does not receive, process, or store payment card information.

Payment processing and purchase verification are handled by Google in accordance with Google's own policies and terms.

8. Biometric Authentication

KASA supports biometric authentication on compatible devices.

Biometric authentication is handled by your device's operating system and secure hardware where available.

KASA cannot access your fingerprint data, facial recognition data, or other biometric information.

This information remains managed by the device and platform providers.

9. Permissions Used by the App

Depending on the features you use, KASA may request certain permissions.

Examples include:

These permissions are used only to provide the functionality associated with those features.

10. Data Sharing and Third Parties

KASA does not display advertisements.

KASA does not use analytics, tracking, or user behavior monitoring systems.

KASA does not sell user data or share it for marketing purposes.

Passwords, notes, attachments, and backup contents are not provided to advertisers, analytics providers, or data collection services.

Limited interaction with third parties may occur only for certain optional features, including:

These interactions do not mean that the contents of your vault are transmitted to KASA-operated servers.

11. Data Retention and Deletion

Your data remains on your device until you choose to remove it.

At any time, you may:

When the application is uninstalled, application data may be removed depending on Android's system behavior.

The management and deletion of backup files exported outside the application remain the responsibility of the user.

12. User Control

All control over your data remains entirely in your hands.

You may:

KASA is designed to give users direct control over their information without requiring a cloud account or centralized service.

13. Changes to This Policy

This Privacy Policy may be updated from time to time.

When updates are made, the "Last updated" date at the top of this page will be revised.

14. Contact

For privacy-related questions regarding KASA Password Manager:

Emre Doğan
kasa.passvault@gmail.com