Last updated: October 14, 2026
WardenKey is a password manager that keeps your data on your own devices. This policy explains what the Android app does and does not do with your information.
Nothing, unless you turn on sync. WardenKey has no analytics, no advertising and no crash-reporting service. The app uses the internet for two things: WardenKey sync (below), only after you sign in to it, and an optional leaked-password check (below), only when you tap it. If you do neither, nothing leaves your phone.
This data is excluded from Android cloud backup and device-to-device transfer. It is removed when you uninstall the app or choose "Remove Vault From This Phone".
Sync is optional. If you turn it on (or join a vault from your PC), you sign in to WardenKey sync with your email address and a 6-digit code we email you. The sync service (sync.wardenkey.com, run by Smart Syndicator) then stores:
A new device can only join after one of your existing devices approves it by comparing a code, so signing in with your email alone never gives anyone your vault. Everything is sent over https. Sign-in codes and alerts are sent through Resend and Amazon SES. We do not sell or share this data, and use it only to run sync.
You can stop syncing on the phone (Settings, Sync), delete the cloud copy from a signed-in desktop (Settings, Sync, Delete the cloud copy), and ask us to delete your account at support@wardenkey.com. If you used the older shared-folder sync, files in that folder are yours to delete.
When you tap Check For Leaked Passwords in Settings, WardenKey checks your saved passwords against the Have I Been Pwned list of passwords exposed in data breaches (api.pwnedpasswords.com, run by a third party). For each password it computes a one-way SHA-1 scramble on your phone and sends only the first 5 characters of it. The service replies with every known leaked scramble that starts the same way, and the final match is made on your phone, so the service cannot tell which password you checked and never receives a password. This runs only when you tap the button, nothing is stored, and results are forgotten when you leave the screen.
When you turn on WardenKey as your autofill service, Android tells WardenKey which app or website a sign-in form belongs to, and what fields it contains, so WardenKey can offer the right login. This information is used on your phone only for that moment. It is not stored, logged or sent anywhere. If you choose to save a new login from a form, it is saved into your encrypted vault.
WardenKey asks Android for permission to use the camera in two places: when you tap Scan Code while joining your PC's vault, to read the QR code your PC shows; and when you tap Scan Card With Camera while adding a payment card, to read the card's number, expiry date, name and security code from its front and back. In both cases the picture is read on your phone, in that moment, and thrown away. Pictures and video are not saved, logged or sent anywhere (the card text is read by a reader built into WardenKey, with no Google or other online service), and the camera is off as soon as you leave that screen. What was read from a card goes only into the form on your screen; it is stored only if you choose Save, and then it is encrypted in your vault like everything else. Declining the permission changes nothing else: you can type the code or the card in instead.
When you copy a password, it is placed on the clipboard marked as sensitive and removed after the time you choose (30 seconds by default).
We do not sell, share or disclose your data. We cannot read your vault, because we never have the keys that open it.
WardenKey is not directed at children under 13 and collects no personal information from anyone.
Uninstall the app, or use Settings, then "Remove Vault From This Phone". Your PC's vault and the cloud copy are separate and stay until you delete them yourself (or ask us to).
If this policy changes, the new version will be posted at this address with a new date.
Smart Syndicator, support@wardenkey.com