Privacy Policy

1. Summary

HostSpica Passkey is designed to collect nothing. It has no account system, no analytics, no advertising SDK, and no server of any kind — the app cannot make a network request even if it wanted to, because the Android app manifest does not declare the INTERNET permission. This policy explains exactly what that means.

2. Data we collect

None. Specifically:

• • No account or sign-up, so no name, email, or identity is ever collected.
• • No analytics, crash reporting, or advertising SDKs are included in the app.
• • No usage data, device identifiers, or diagnostics are sent anywhere.
• • No cookies (the app is not a website).

3. What's stored, and where

Passkey private keys are generated and held inside the Android Keystore (hardware-backed where the device supports it) and are non-exportable — we never see them, and they never leave your device. Basic metadata (which site a passkey is for, an account label, creation date) is stored in a local, on-device database only. Nothing here is backed up to any HostSpica server, because none exists for this app.

4. Permissions the app requests, and why

• • Camera — only to scan a pairing QR code on-screen when signing in to another device's browser. The camera feed is processed entirely on-device; it is never recorded, stored, or transmitted.
• • Bluetooth — only to run the direct, encrypted, single-use pairing connection between this phone and the browser you're signing into. No relay server is involved, because none exists.
• • Biometric / device credential — required for every passkey signature. Biometric data itself is handled entirely by the Android OS/Keystore; the app never receives or stores it.

The app does not request and cannot be granted network/internet access.

5. Third-party sharing

There is nothing to share, because nothing is collected. HostSpica does not sell, rent, or transmit any user data, because none passes through our hands.

6. Children's privacy

This app does not knowingly collect information from anyone, including children, because it does not collect information from anyone.

7. Changes to this policy

If this app's data practices ever change, this page will be updated before that change ships, and the app's in-app version number will reflect it.

8. Contact

Questions about this policy or the app: [email protected]