LockHarbor · Last updated 14 September 2026
The short version. LockHarbor has no account, no server and no analytics. Your vault is stored encrypted on your own device and is never uploaded anywhere. We never collect, receive, store or sell the contents of your vault, and we have no analytics of any kind.
Two features can make a network request, and both are things you choose to do: the optional breach check, and buying or restoring LockHarbor Pro. Neither can see your vault. Both are described in full below.
Nothing from your vault, ever. LockHarbor has no user accounts, no sign-in, no telemetry, no crash reporting service, no advertising identifiers and no third-party analytics. There is no server that belongs to LockHarbor for your data to be sent to.
If you buy LockHarbor Pro, two things are collected by our payments provider so that your purchase can be recognised on your device: your purchase history for this app, and an anonymous identifier generated on your phone. That identifier is not linked to your name, your email address or anything you have stored. See section 3b.
Everything you save — passwords, usernames, website addresses, notes, payment cards, IDs, bank accounts, Wi-Fi passwords, folder names and pictures — is stored in a single encrypted database file inside the app's private storage on your device. It stays there unless you explicitly export it yourself.
Your master password is never stored, anywhere, in any form. It is used to derive a key using Argon2id, and that key protects your vault key; your entries are encrypted with XChaCha20-Poly1305. Titles, usernames and web addresses are inside the encrypted content rather than beside it, so the stored file contains no readable text about what you have saved.
An honest limitation, stated plainly: naming strong algorithms is not a security guarantee. LockHarbor has not had an external security audit, and this policy makes no claim that it is unbreakable. If your master password is guessable, no amount of encryption saves it.
Nobody can recover your vault for you. Not us — we have no copy and no ability to reset anything. If you forget your master password and lose your recovery key, and you have no backup, the data is gone permanently. That is the direct cost of nothing being held on a server.
The Security screen can check whether a password appears in publicly known data breaches, using the Have I Been Pwned Pwned Passwords service. This is off by default and asks you to confirm before it is ever enabled.
When you run a check, your password is never sent. LockHarbor hashes it locally and sends only the first five characters of that hash, receiving back a list of many candidates and comparing them on your device. This is the standard k-anonymity method.
What that request unavoidably reveals to the service and to your network provider:
It does not reveal which password, which account, or which website.
LockHarbor Pro is optional. The free app is a complete password manager and stores as much as you like; Pro adds autofill, “My info”, the security detail, which passwords appear in a known breach by name, reminders, document scanning, company logos, your own pictures and the 3D icons.
Purchases are handled by RevenueCat on top of the Apple App Store or Google Play. We never see your payment details — those stay with Apple or Google and never reach us or RevenueCat.
What is collected, and only if you buy or restore a purchase:
Nothing about your vault is involved. No password, note, card, document, website, filename, or count of what you have stored is sent, and none of it could be derived from what is.
The app is deliberately quiet about this. It does not contact the payments service when it starts. It only does so when you open the Pro screen, buy something, restore a previous purchase, or — if you are a subscriber — about once a day, so that a cancellation or refund is noticed. If you never buy Pro, no request is ever made.
If you never enable the breach check and never buy Pro, LockHarbor makes no network requests at all and works fully in airplane mode. Even as a Pro subscriber, everything except the daily check works offline exactly as before.
LockHarbor does not request microphone access, location, contacts, or any identifier.
You can create an encrypted backup, or an unencrypted plain-text export. Once you share such a file it is outside LockHarbor's control and this policy no longer governs it — wherever you send it, that destination's rules apply. A plain-text export contains your real passwords in readable form; the app warns you and asks for your master password before producing one.
LockHarbor is not directed at children and collects no information from anyone, including children.
If this policy changes, the date at the top changes with it. Any change that meant LockHarbor began collecting data would be stated prominently here rather than quietly added.
Questions about privacy: lockharbor@dubayaapps.com