Effective: [FINAL EFFECTIVE DATE — REQUIRED]
Operator: [PUBLISHER LEGAL NAME — REQUIRED]
Play developer: [DEVELOPER DISPLAY NAME — REQUIRED]
Privacy contact: [PRIVACY EMAIL — REQUIRED]
Postal address: [POSTAL ADDRESS — REQUIRED]
At a glance
The password manager and file manager work locally. We do not receive master passwords, stored credentials, private notes, file names, file contents, or encrypted backups. The VPN is optional and sends only the information required to provision and route an encrypted tunnel.
Password vault and files
Vault records are encrypted on the device with keys derived from the master password. The operator has no recovery copy. Backups leave the app only when the user explicitly exports them to a destination the user selects. File operations occur on the device after optional All files access; selected files may be sent to another app or Android's installer only at the user's direction.
VPN profile provisioning
When the user elects to connect, the app sends a randomly generated WireGuard public key to ciphernest-app.pages.dev-associated service infrastructure through a Cloudflare Worker. The service assigns a tunnel address and retains the public-key/address mapping until the user invokes the in-app profile deletion control. The WireGuard private key remains encrypted on the device.
Live routing and retention
While the VPN is connected, the gateway at Chicago, United States necessarily processes the source IP address, DNS requests, destination addresses, and traffic contents in memory to forward packets. The gateway is configured not to retain browsing destinations, DNS-query history, traffic contents, connection timestamps, or per-user bandwidth history. These transient routing values are not used for profiling or advertising.
Service providers
Cloudflare processes HTTPS profile requests as an infrastructure provider. BitLaunch and its underlying data-center provider supply the VPN host. They act for the operator to deliver the service; data is not sold and is not provided for their advertising.
Choices and deletion
VPN use, All files access, and APK installation access are optional. The user may decline each disclosure. Disconnecting stops routing. The VPN screen's Delete/Forget profile action removes the remote public-key/address record and erases the local VPN identity. For a complete result, use that control before uninstalling the app.
Security and children
Profile requests use HTTPS and tunnel traffic is encrypted between the device and VPN endpoint with WireGuard. The app has no advertising, analytics SDK, crash-reporting SDK, user account, or paid tier. It is not directed to children under 13.
Changes and contact
Material changes will be posted at this URL with a revised effective date. Questions or privacy requests should be sent to [PRIVACY EMAIL — REQUIRED].