Privacy Policy

Last updated: July 2, 2026

Publisher: TFH Technologies · Support: contact@passwords-manager.com

Overview

This Privacy Policy explains how TFH Technologies (“we,” “us,” or “our”) handles information when you use Passwords Manager apps published at passwords-manager.com.

We offer three editions: PM Lite (free, offline-only), PM Pro (one-time purchase, offline-only), and PM Max: Password Manager (subscription, online account, optional encrypted cloud sync). This policy treats PM Max separately because it uses accounts, subscriptions, and third-party online services. PM Lite and PM Pro are described in a dedicated section at the end.

Across all editions, vault contents (passwords, secure notes, cards, crypto wallet entries, and categories) are stored locally on your device and encrypted with AES-256. We do not receive your master password, master pattern, or unencrypted vault data. This is a zero-knowledge design for vault contents.

Product comparison

How privacy-relevant features differ by edition:

Topic	PM Lite	PM Pro	PM Max
Pricing	Free	One-time purchase	Auto-renewing subscription (monthly / yearly)
Online account	No	No	Yes (email, Google, or Apple sign-in)
Internet / third-party services	Not used for vault data	Not used for vault data	Used for sign-in, subscriptions, optional cloud sync
Cloud sync	No	No	Optional encrypted Google Drive (subscription required)
Vault on TFH servers	Never	Never	Never (encrypted backup in your Google Drive if enabled)
Account deletion	N/A (no account)	N/A (no account)	In-app + web instructions

PM Max — Privacy Policy

The following sections apply to PM Max: Password Manager (iOS and Android).

Information we collect

PM Max processes the following categories of information:

Collected and processed

Account identifiers: Email address, unique account ID, and sign-in provider metadata when you create or sign in to a PM Max account (email/password, Google, or Sign in with Apple; additional methods may be added in the future).
Profile information: Name and profile photo when provided by Google Sign-In or Sign in with Apple (iOS).
Subscription status: Purchase and entitlement information from the Apple App Store and Google Play (we do not receive full payment card details).
Device-local app data: Encrypted vault data, app settings, and Google Drive connection details stored on your device when you enable sync.

Not collected by TFH on our servers

Your master password or master pattern
Plaintext contents of passwords, secure notes, payment cards, or crypto secrets
Decrypted vault backups (we do not host vault backups on TFH servers)

Stored in your Google Drive (if you enable sync)

One encrypted backup file named PM-MAX.txt in your Google Drive app data folder (hidden application-specific storage, not your normal visible Drive files). Content is encrypted on your device before upload.

How we use information

Create and manage your PM Max account and verify email addresses before allowing email/password sign-in
Authenticate you via email/password, Google sign-in, Sign in with Apple, or other sign-in methods we may add later
Check subscription status and restore purchases through the app stores
Enable optional encrypted Google Drive backup and sync when you connect a cloud account and have an active subscription
Provide customer support when you contact us
Improve app reliability and comply with legal obligations

We do not use your data for advertising, sell personal information to data brokers, or use vault contents to train AI models.

Third-party services

PM Max uses the following third-party services. PM Lite and PM Pro do not use these services for vault operations.

Account sign-in services — create and manage your PM Max account (email/password, Google, Sign in with Apple; more methods may be added)
Google Drive — encrypted backup in your app data folder when you choose to connect
Google Sign-In — optional authentication method
Sign in with Apple — optional authentication on iOS
Subscription services — subscription status and purchase restoration
Apple App Store / Google Play — payment processing for subscriptions (TFH does not receive full card numbers)

Each provider has its own privacy policy. We encourage you to review their terms. TFH does not operate its own database servers for vault contents.

Cloud backup & Google Drive

Google Drive is available now. When you connect Google Drive with an active PM Max subscription, the app stores one encrypted backup file named PM-MAX.txt in your Google Drive app data folder — hidden application-specific storage, not your normal visible Drive files. Backup content is encrypted on your device before upload. TFH servers do not store vault backups.

Coming soon (not yet available): iCloud, OneDrive, Dropbox, and Box sync are shown in the app as planned features but are not functional today. This policy will be updated when additional providers launch.

Google sign-in is used only to connect Google Drive for that encrypted backup. PM Max does not browse your unrelated Drive files.

We do not run vault servers. Nothing decrypted is uploaded to a Passwords Manager data center. You can also export an encrypted backup manually and move it yourself. If you never enable cloud sync, your vault stays on your device unless you export it.

PM Max cannot restore your vault from TFH. We have no copy. Without cloud sync or a kept export, data loss from a lost or reset device may be permanent.

We do not use connected cloud services for ads, credit scoring, profiling, or training public AI models.

Google Drive disclosure

Only PM Max connects to Google for encrypted backup when you choose Google Drive and have an active subscription. PM Lite and PM Pro never connect to Google for vault data. PM Max writes a single encrypted file (PM-MAX.txt) to your Google Drive app data folder. PM Max does not browse your personal documents in My Drive.

PM Max follows Google’s rules for apps that use Google sign-in and Drive, including the Google API Services User Data Policy and Google APIs Terms of Service.

Data accessed

After you enable Google Drive sync and approve the sign-in prompt, PM Max may use:

Google Drive app data folder access. To create, update, or delete the encrypted PM-MAX.txt backup file PM Max manages for sync. Your other Drive files are not opened or searched.
Basic sign-in details from Google. Such as which Google account you linked, as shown on Google’s sign-in screens.

We request the smallest access scope Google allows for this type of app backup.

Data usage

That information is used only to:

Maintain your Google Drive connection for encrypted backup and sync.
Upload and download encrypted backup files PM Max created on your device.
Display which Google account is linked in the app.

Data sharing

We do not sell Google-related information and do not share it with data brokers. PM Max communicates with Google’s systems only for the backup you enable. Google’s privacy rules apply on their side.

Storage & protection

Vault data is encrypted on your device before upload. TFH does not keep a decrypted copy on our servers.
Google Drive connection details stay on your device using secure storage where the OS provides it.
Google Drive access is limited to what you approve for encrypted backup and sync.

Retention & deletion

Encrypted backups in your Google account remain until you delete them or revoke access. Remove PM Max in Google Account → Security → Third-party access.
Disconnect Google Drive in PM Max to stop future sync.
Deleting your PM Max account disconnects Google Drive on the device but does not automatically delete existing Drive backups — see Account Deletion.

Data storage & security

Local encryption: Vault data on your device is protected with AES-256 encryption.
End-to-end encrypted cloud backup: Backup files are encrypted on your device before they leave it. We cannot decrypt your vault.
Zero-knowledge vault: TFH cannot read your master credentials or unencrypted entries.
Your responsibility: Protect your device (biometrics/PIN), master password or pattern, and any connected cloud account. We recommend revoking Google Drive app access after account deletion if you want backups removed from Google.

Subscriptions & payments

PM Max subscriptions are sold through the Apple App Store and Google Play as auto-renewing monthly or yearly plans. Subscription status is verified in the app through the store platforms.

Google Drive cloud sync requires an active PM Max subscription. Without an active subscription, you can still use the app locally but cannot connect or sync cloud backup.
Canceling or deleting your PM Max account does not automatically cancel a store subscription — you must cancel through the App Store or Google Play (or in-app “Manage plan” where available).
Refunds are handled by Apple or Google under their policies, not directly by TFH.

Full subscription terms: Subscription Terms.

Account deletion

PM Max supports in-app account deletion at Profile → Delete Account, with re-authentication required. Deleting your account removes your online account identity, wipes local vault data on that device, disconnects Google Drive on the device, and resets subscription identity in the app.

Account deletion does not automatically cancel App Store / Google Play subscriptions or delete encrypted backups already stored in your Google Drive.

Step-by-step instructions, subscription reminders, and Google Drive cleanup guidance: Account Deletion.

Delete Device Data (Settings) is separate: it wipes local vault data on the device only and does not delete your online account or cloud backup.

PM Lite & PM Pro — Privacy Addendum

PM Lite and PM Pro are offline-only password managers. They do not create online accounts, do not offer cloud sync, and do not connect to account, subscription, or cloud storage services for vault data.

All vault data stays on your device, encrypted with AES-256.
We do not collect vault contents, master passwords, or master patterns.
We do not use third-party analytics services to collect your saved data.
Storage permission may be requested for local import/export and backup files you choose to create.
In simple terms for these editions: we know nothing about your private vault contents.

These offline editions are intentionally different from PM Max, which requires online services for accounts and optional sync.

Your choices & rights

Access and correction: Contact us if you need help with account or subscription information.
Deletion: PM Max users can delete accounts in-app or follow our web instructions.
Cloud sync: Optional — decline Google Drive access to keep data device-only (export/import remains available).
Revoke Google access: Remove PM Max from Google Account → Security → Third-party access.

Retention

Account sign-in data is deleted when you delete your PM Max account.
Encrypted Google Drive backups remain in your Google account until you delete them or revoke app access.
Local vault data is removed when you delete your account, use Delete Device Data, or uninstall the app (subject to OS behavior).

Children’s privacy

Passwords Manager apps are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact contact@passwords-manager.com.

International users

TFH Technologies is based internationally and uses service providers (such as Google and Apple) that may process data in various countries. By using PM Max, you acknowledge that account and subscription data may be processed where those providers operate.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the apps after changes constitutes acceptance of the updated policy.

Links to other sites

The apps and website may link to third-party sites (for example, URLs saved in your vault or store subscription pages). We do not control external sites and are not responsible for their privacy practices.

Cookies (website)

Our website may use essential cookies for basic functionality. If we add non-essential analytics or marketing cookies in the future, this policy and consent behavior will be updated.

Contact us

Questions about this Privacy Policy, account deletion, data practices, or subscriptions: contact@passwords-manager.com

Thank you for trusting Passwords Manager.