Android app · Technical privacy notice
LockBox privacy notice
This notice describes the current LockBox Android evaluation build, reviewed on 16 October 2026. LockBox is not available for public installation. Use fictional entries only; do not store real credentials in this build. This technical summary is not an independent security review or legal or store-policy approval.
Information the app handles
Entries you add, your app preferences, and PIN and recovery settings stay on this device in app-private storage. LockBox has no account, online sync, advertising or analytics. The current release package does not request the Android internet permission, and LockBox does not send vault entries or diagnostic files to Annapurna.
Diagnostic copies
If LockBox cannot read an existing vault, it may keep a private diagnostic copy to help protect the original from accidental replacement. Depending on the file's earlier format, that copy may contain sensitive account information. LockBox checks for deletion after 30 days when the app opens and through scheduled Android work. Android may delay background cleanup, and an unsuccessful deletion remains listed for manual removal. Deleting a file does not guarantee physical erasure from device storage.
Copying a password
When you copy a value, Android places it on the system clipboard. LockBox requests removal after 60 seconds, but the operating system may delay or prevent cleanup. Other apps or system features may be able to access clipboard content before it is removed.
Backup and recovery
Android backup and device transfer are disabled. Clearing app storage, uninstalling the app, or losing access to this installation can permanently remove the vault. The recovery code supports a PIN reset on the same installation only; it does not restore a vault after reinstall or on another device.
Questions and release status
LockBox does not collect contact details. If you choose to contact Annapurna, that separate website flow is covered by the website privacy notice. Device testing, independent security and privacy review, approved support materials, and store declarations remain open. This page must be reviewed again before public distribution if the app or its dependencies change.