XNian Vault Privacy Policy

Effective date: October 15, 2026

XNian Vault is a password manager built so that we never have access to your data. This policy explains what that means in practice.

Data we collect

None. XNian Vault has no accounts, no analytics, no advertising, and no tracking. The app does not send your passwords, notes, verification codes, or any usage data to us or to any third party.

Where your data lives

• Everything you save is encrypted on your device with AES-256-GCM, using a key protected by your master password (Argon2id). We never see your master password or your recovery code.
• The encrypted vault is stored in the app's private storage on your device, shared only with XNian Vault's own AutoFill extension.
• If you turn on Face ID or Touch ID, a copy of the vault key is stored in the iOS Keychain on this device only and can be read only after biometric authentication.
• Your encrypted vault is included in your regular iPhone/iPad backups (iCloud or computer). It stays encrypted there and can only be opened with your master password or recovery code.
• If you turn on iCloud Sync, each item is encrypted on your device before it is uploaded to your own private iCloud database. Apple and the developer cannot read it.

Compromised password check (optional)

Only when you tap "Check for Compromised Passwords" in Security Check, XNian Vault sends the first 5 characters of each password's SHA-1 hash to the Have I Been Pwned service (api.pwnedpasswords.com). The full hash and the password itself never leave your device, and the service cannot tell which password was checked. No other network requests are made.

AutoFill and QuickType suggestions

When QuickType suggestions are on, XNian Vault registers the website and username (never the password) of your logins with iOS so they can appear above the keyboard. This list stays on your device and is managed by iOS. You can turn it off at any time in Settings > AutoFill > QuickType Suggestions.

Camera

The camera is used only to scan two-factor authentication QR codes when you choose to. Images are processed on the device and never saved or transmitted.

Deleting your data

Use Settings > Erase Vault, or delete the app. Because we hold no copy of your data, there is nothing for us to delete on our side.

Children

XNian Vault does not knowingly collect information from anyone, including children.

Changes

If this policy changes, we will update this page and the effective date above.

Contact

mxnzplife@gmail.com

XNian Vault 隐私政策

生效日期:2026 年 10 月 15 日

XNian Vault 是一款我们自己也无法查看你数据的密码管理器。本政策说明这在实际中意味着什么。

我们收集的数据

不收集任何数据。XNian Vault 没有账号体系、没有统计分析、没有广告、不做任何追踪。你的密码、笔记、验证码以及使用情况都不会发送给我们或任何第三方。

数据存放在哪里

• 你保存的所有内容都在设备上用 AES-256-GCM 加密,加密密钥由你的主密码(Argon2id 派生)保护。我们永远看不到你的主密码和恢复码。
• 加密后的保管库保存在本 App 的私有存储中,只与 XNian Vault 自带的自动填充扩展共享。
• 开启 Face ID / Touch ID 后,保管库密钥的一份副本会保存在本机的 iOS 钥匙串中,仅在生物识别验证通过后可读取,且不会迁移到其他设备。
• 加密后的保管库会随你的 iPhone / iPad 常规备份(iCloud 或电脑)一起备份。备份中的数据仍是密文,只能用你的主密码或恢复码打开。
• 开启 iCloud 同步后,每个条目在本机加密后才上传到你自己的 iCloud 私有数据库,Apple 和开发者都无法读取。

泄露密码检测(可选)

只有当你在"安全体检"中点击"检查密码是否泄露"时,XNian Vault 才会把每个密码 SHA-1 哈希值的前 5 位发送给 Have I Been Pwned 服务(api.pwnedpasswords.com)。完整哈希和密码本身不会离开你的设备,该服务也无法判断查询的是哪个密码。除此之外 App 不发出任何网络请求。

自动填充与 QuickType 建议

开启 QuickType 建议后,XNian Vault 会把登录条目的网站和用户名(不含密码)登记给 iOS,以便在键盘上方显示。该列表只保存在你的设备上,由 iOS 管理。你可以随时在"设置 > 自动填充 > QuickType 建议"中关闭。

相机

只有在你主动扫描两步验证二维码时才会使用相机。画面仅在设备上识别,不会保存或上传。

删除数据

在"设置 > 抹掉保管库"中操作,或直接删除 App。我们没有保存你的任何数据,因此服务器端无需删除。

未成年人

XNian Vault 不会收集任何人(包括未成年人)的信息。

政策变更

如本政策有变更,我们会更新本页面及上方的生效日期。

联系我们

mxnzplife@gmail.com