Privacy
Cloud backups and history
Cloud features are enabled separately after server setup. The server stores encrypted backups and version metadata; the password and decryption key are never sent. Older versions are retained for up to 30 days; the latest remains until cloud data is deleted. History is limited to 64 MiB per account, each backup to 2 MiB of source data. New uploads pause when full. Uploading requires PRO, the trial or a server-side owner grant; existing backups remain readable after expiry. Disconnecting a phone does not delete cloud copies. Recovery needs a separate password. The browser extension is installed separately.
Account data
When server sign-in is enabled, we store your verified email, account ID, free-week start and purchase link. Email codes last 10 minutes and are stored only as protected verification values; session tokens are hashed and last up to 30 days. Request limits use protected email/IP values. Your phone encrypts the session separately from 2FA keys. Contact us to request data deletion.
Your keys stay with you
Account names and 2FA secrets are kept in the encrypted phone vault. Codes are generated on the device. If you separately enable cloud backups, the server receives only encrypted contents; it never receives the password or decryption key.
Android permissions
The camera is used only to scan QR codes. You choose images or backups through the system file picker. Android verifies biometrics and PINs: the app does not receive your PIN or fingerprint templates. Internet access is used to purchase and verify subscriptions; code generation works offline.
Free week
With server sign-in enabled, the free week’s start and end are stored on the server for the verified email. Uninstalling the app does not delete that record. Until the server is connected, the dates are stored only on the device. Starting the week sends no payment data and creates no PayPal subscription.
Subscription data
Once payments are enabled, the server receives a random purchase identifier, the selected plan and currency. It stores a hash of the identifier, the PayPal subscription ID and status, the paid period and minimal payment event data. PayPal processes its account and payment method details under its own policy. Card details are not entered in Key369.
Contact us
Tapping “Support” opens your email app addressed to 369apps.studio@gmail.com. The message is sent only when you choose to send it. The template includes the app and Android versions. Account names, QR codes, secrets and recovery codes are not attached.
Backups and clipboard
A backup is created only at your request and is encrypted with a separate password. You choose where to save it. A copied one-time code is marked as sensitive and cleared by the app after 30 seconds when Android allows clipboard access. Do not send a backup together with its password.
Retention and deletion
Deleting an account removes it from the current vault, but not from previously created backup files. Uninstalling the app removes its local data; external files you saved must be deleted separately. Send requests to delete server-side subscription data to support. Payment records may be retained for mandatory accounting and dispute resolution periods.
Aggregate statistics without profiles
The app has no advertising SDKs. Aggregate statistics send only a launch event, platform and version; download links count file requests. The counter retains daily totals for up to 400 days, without email, 2FA keys, vault contents or a persistent device identifier. Statistics use no cookies, advertising IDs or personal profiles. Offline launches may not be counted. Hosting providers process ordinary technical request information, including IP addresses; this is not written to counter tables. Cloud backups remain your choice and are encrypted before upload. Policy dated September 26, 2026. Data enquiries: 369apps.studio@gmail.com.
Key369 · iPhone
A password protects the vault. It locks when hidden or after 5 minutes of inactivity. Face ID is not connected in this web version. Removing the app or Safari data may delete keys. Keep a backup. Email cannot reset the cloud password. Email links your subscription and encrypted backups. Local codes need no account.
Key369 · iPhone
A password protects the vault. It locks when hidden or after 5 minutes of inactivity. Face ID is not connected in this web version. Removing the app or Safari data may delete keys. Keep a backup. Email cannot reset the cloud password. Email links your subscription and encrypted backups. Local codes need no account.
About this website
This website has no advertising analytics or forms that collect keys. Only your selected language and currency are saved in your browser. Downloads start when you click. The hosting provider processes technical requests needed to serve the page.
Key369 app documents, version 1.8.5. For data, payment and account deletion questions: 369apps.studio@gmail.com.