Privacy Policy
Gumlock · Android · Last updated: 2026-10-15
In one line — This app does not collect personal information. There is no account and no developer server. The passwords you save are encrypted on your device with your master password, and neither the developer nor Google can read them.
Information we collect
We collect no personal information. No name, email address, phone number, location, or contacts. There are no accounts and no sign-in, and the app contains no analytics, ads, or crash reporting. The developer has no access to your vault.
If you email us, your address and message remain in our inbox; we delete them within one year of resolving the matter.
Where the data lives
Your vault (sites, usernames, passwords, notes, attachments and so on) is stored encrypted with AES-256-GCM on your device. The key is derived from your master password (PBKDF2-SHA256, 600,000 rounds), and your master password is never stored anywhere. Decrypted content exists only in memory while the app is unlocked.
| What | Where | Who can see it |
|---|---|---|
| Vault (encrypted) | On your device | You, with your master password |
| Vault names (so you can pick one on the lock screen) | On your device — not encrypted | Anyone holding the device |
| The same vault, still encrypted (if Google Drive sync is on) | The hidden app-data folder of your own Google Drive | You, with your master password |
| Encrypted backup files (if you export or turn on automatic backup) | Wherever you choose — a device folder, SD card, a cloud app's folder, etc. | You, with your master password |
| Unencrypted CSV (only if you export it yourself) | Wherever you choose | Anyone who has the file — delete it after use |
| Shared account text (only if you use Share Account — you choose what is included) | The app and person you choose | Anyone who can see that chat or app — not encrypted |
| Wrapped vault key (if biometric unlock is on) | On your device — unwrapped only by an Android Keystore key that never leaves the device | The device owner |
Fingerprint and face data are handled by Android on the device; the app receives only a match / no-match result. Nothing is uploaded to Android's cloud backup. Only when you move to a new phone (device-to-device transfer) are the encrypted vault files, the vault list and settings carried over. The home screen widget shows no item information, only the date of the last backup.
When the app uses the internet
Google Drive sync (optional, Pro). This is the only feature in which the app connects to the internet itself, and only if you turn it on. You authorize it with your own Google account, and it asks for a single permission, drive.appdata — a hidden folder only this app uses. It cannot read or change any other file in your Drive, and it does not ask for your name, email or profile. It uploads only the encrypted vault file and attachments, with random IDs as file names. The sign-in token is not stored on the device. Turning sync off stops syncing; nothing is deleted. Gumlock for iPhone (1.0.1 or later) can sync the same vaults.
Purchases. Gumlock Pro is handled by Google Play. Payment details go to Google only and never reach the app or the developer. The app only asks Play whether you own Pro and does not store that on the device. The Google diagnostics-reporting module bundled with the billing library has been removed from the app.
What happens only on your device
Autofill. If you choose Gumlock as your autofill service in Android settings, Android hands Gumlock the structure of sign-in screens in other apps and browsers (field types, the web address or app package name). Gumlock uses this only on the device to find the right item and sends it nowhere. A username and password received through “Save New Account” go only into your encrypted vault, after you unlock it.
Clipboard. A copied password is cleared after the time you set (30, 60 or 120 seconds), and on Android 13 and later it is marked as sensitive so it doesn't appear in previews.
Screen protection. Screenshots, screen recording and the recent-apps preview of the app are blocked.
Photo and file attachments (Pro). Only the file you pick in the system photo picker or file picker reaches the app, and it is stored encrypted with the vault key. The app does not ask for photo library access.
Permissions the app requests
- Internet and network state — used only for Google Drive sync.
- Biometrics — unlocking with fingerprint or face.
- Google Play billing — buying Gumlock Pro.
- Wake lock and run at startup — so scheduled tasks such as clearing the clipboard and automatic backup keep working after the phone restarts.
The app does not request location, contacts, photo library, storage, camera or microphone access.
Sharing with third parties
We do not hand your information to anyone. Only the following services handle data, under their own policies.
What the app does not do
- Collect usage data, run analytics, show ads, send crash reports, or track you
- Share or sell data to third parties
- Require an account, or keep your master password
- Upload your vault to Android's cloud backup
Retention and deletion
We hold nothing of yours. Everything below is yours to delete.
- Device — deleting the app deletes its vaults. To delete a single vault, use Settings > Vaults > Delete This Vault in the app. If that vault is synced, its Drive copy is deleted too.
- Google Drive — in Google Drive > Settings > Manage apps, delete Gumlock's hidden app data. You can remove the app's access under Google Account > Security > Your connections to third-party apps & services.
- Backup and CSV files — delete them from the folder where you saved them.
There is no need to ask us to delete anything, because we hold nothing.
Children's privacy
This app is not directed at children, and we collect no personal information from anyone, children included.
Changes to this policy
If this policy changes, we update this page and the date above.
Contact
| Business name | Ggeomddakji |
|---|---|
| Registration no. | 413-21-02441 |
| support@ggeomddakji.com |