Privacy Policy

Ghost Auth Manager · Effective September 21, 2026 · Packagein.sddev.ghost_auth_manager

Core Privacy Principle & Zero Cloud Server Policy

Ghost Auth Manager (in.sddev.ghost_auth_manager) is built on a strict privacy-first foundation: we do not support or operate our own cloud server.

Zero Credential Internet Transfer: The application does not transfer any of your credentials, usernames, passwords, passkeys, 2FA secret keys, or vault data via the internet to SDDEV or any intermediate central server. Everything is stored 100% locally on your personal device.

Because we operate zero central database servers and collect no telemetry, we have zero access to your sensitive credentials or vault data.

Data Safety & Local Storage Architecture

All sensitive vault data is secured on-device using hardware-backed SQLCipher 256-bit AES encryption paired with Argon2id key derivation, Android Hardware Keystore, and FLAG_SECURE anti-screenshot window protection.

100% Local Vault: All logins, passwords, passkeys, TOTP secret tokens, digital identity cards, and secure notes are encrypted and stored strictly inside local app storage on your device.
Zero Knowledge Design: Master passwords and encryption keys never leave your physical device hardware. Remote password reset or recovery by SDDEV is impossible by design.
No Remote Telemetry: No analytics, tracking tags, advertising identifiers, or remote crash logs containing sensitive data are collected or transmitted.

User-Controlled Cloud Backups (Google Drive & Dropbox)

Only if you explicitly choose to create a cloud backup, you can use your own personal account with Google Drive or Dropbox.

The app communicates directly with official Google Drive and Dropbox APIs using OAuth authentication. The cloud backup system provides API tools exclusively to:

Save Cloud Backups: Export and upload an encrypted snapshot of your local vault to your personal cloud account.
Retrieve & Restore: Download and decrypt your backup file during vault restoration onto a new or reset device.
Delete Old Backups: Manage cloud storage by deleting outdated or superseded backup files upon user command or backup rotation.

Direct Service Communication: SDDEV has no central server in this process. Your phone connects directly to Google Drive or Dropbox servers. Respective privacy policies of Google Drive or Dropbox apply based on which cloud service you choose to use.

Bluetooth HID Remote Keyboard Typing (Nearby Device)

Ghost Auth Manager allows your mobile phone to act as a wireless Bluetooth HID (Human Interface Device) keyboard.

When connected to a nearby device (PC, Mac, Linux, Smart TV, Android TV, or smartwatch), Ghost Auth Manager sends keystrokes directly over local Bluetooth RFCOMM/HID protocol to type your username, password, and 2FA TOTP code directly into target login fields on the other device.

No Internet or Cloud Sync Needed: Because credentials are typed directly over local Bluetooth hardware layer to nearby devices, there is no need to sync your vault across devices over the cloud or internet.

Permissions Disclosures

The application requests only the necessary Android system permissions to deliver local vault operations, Bluetooth HID typing, and optional user-directed backups:

BLUETOOTH_CONNECT & BLUETOOTH_ADVERTISErequired

Used for Nearby Device discovery and Bluetooth HID emulation to wirelessly type credentials directly into target devices (PC, Mac, Linux, Android TV) without clipboard snooping.

CAMERArequired

Used for scanning 2FA TOTP setup QR codes and 100% on-device text recognition (OCR) for digital ID cards. No camera images or video frames are ever recorded or uploaded.

USE_BIOMETRIC / USE_FINGERPRINTrequired

Used for local hardware biometric authentication (Fingerprint and Face unlock) to decrypt your master vault key.

QUERY_ALL_PACKAGESrequired

Used by the system Autofill framework to identify installed Android apps and match credentials automatically for instant autofill suggestions.

POST_NOTIFICATIONSrequired

Displays progress notifications and completion alerts for background vault sync and scheduled backups (Android 13+).

FOREGROUND_SERVICErequired

Ensures scheduled WorkManager vault backups complete reliably without being terminated by OS battery optimization.

INTERNET & ACCESS_NETWORK_STATEsensitive

Used strictly for user-initiated Google Drive AppData and Dropbox OAuth authentication, uploading encrypted backups, and restoring vault files. Zero credential data is transferred to SDDEV.

READ/WRITE_EXTERNAL_STORAGErequired

Legacy storage permissions for Android 12 and below (API ≤ 32 / API ≤ 29) to select or export local encrypted backup archive files.

Third-Party Integrations & Privacy Policies

If you elect to use optional cloud features, your interactions are governed by the respective privacy policies of those services:

Google Privacy Policy: Applies when using Google Drive Cloud Backup: Google Privacy Policy.
Dropbox Privacy Policy: Applies when using Dropbox Cloud Backup: Dropbox Privacy Policy.

Your Data Rights

Because no personal data is stored on remote servers by SDDEV, your right to data deletion is fully within your control. You can permanently erase all vault data by wiping app storage or uninstalling the app:

Android Settings → Apps → Ghost Auth Manager → Storage → Clear Storage / Clear Cache.

Policy Changes & Developer Contact

We reserve the right to update this Privacy Policy to reflect app capabilities or legal changes. For questions, security inquiries, or direct feedback, contact us:

Feedback:Submit Ghost Auth Manager Report via Site Feedback

Email:contactus@sddev.in

Report an Issue or Send Feedback

Encountered an issue, security recommendation, or have a feature request for Ghost Auth Manager? Send it directly to our team with zero telemetry.

Open Feedback Form (Ghost Auth Manager Pre-selected)