Privacy Policy

Last Updated: August 18, 2026

forcerocket (“we,” “us,” or “our”), operated by Shantinath Patil, publishes the Forcekeyper iOS application (the “App”) and the associated web-based password generator at forcerocket.in/forcekeyper/password-generator/ (the “Web Tool”). This Privacy Policy explains how information is handled in connection with them. By downloading or using the App or the Web Tool, you acknowledge this Privacy Policy. If you do not agree, do not use them.

1. The Short Version

Forcekeyper collects no data. The App is 100% offline: it makes no network requests and contains no analytics, advertising, tracking identifiers, or crash-reporting SDKs. It works entirely in Airplane Mode. Your passwords, previous-password safety-net values, and authenticator (TOTP) secrets are stored on your device and, at your option, in your own end-to-end-encrypted iCloud Keychain. We never see, receive, or store any of it.

2. Data We Collect

None. We do not operate any server, and the App does not transmit anything to us or to any third party. We have no account system, so we never receive an email address, name, or device identifier. Because there is no telemetry, we do not know if, when, or how you use the App.

3. Where Your Data Lives (On Your Device)

All information you create or import is stored locally under your control:

• Passwords, previous passwords, and authenticator (TOTP) secrets: stored in the iOS Keychain via flutter_secure_storage, gated by Face ID / Touch ID and the platform's encrypted storage.
• Non-secret generator preferences: length, character-set toggles, symbol preset/custom, exclude-ambiguous, require-each-type, hex mode, and your iCloud-sync toggle are stored with the OS preferences store (shared_preferences). These contain no secrets.

If you delete the App, its device-local data is removed by iOS. Data you chose to sync via iCloud Keychain or export to a backup file persists in those locations until you remove it there.

4. Optional iCloud Keychain Sync

You may enable iCloud Keychain sync (default on, user-toggleable in Backup & sync). When enabled, saved items are marked with Apple's kSecAttrSynchronizable attribute and replicated through your iCloud Keychain, which is end-to-end encrypted by Apple and gated by your device passcode/biometrics. There is no server operated by us in this path. Turning sync off migrates the data to a device-local Keychain partition. This feature is governed by Apple's Privacy Policy and requires Two-Factor Authentication and iCloud Keychain enabled on your Apple Account.

5. Optional Encrypted Backup File

You may export a single passphrase-encrypted backup file (.frbak) containing your saved passwords and TOTP secrets. It is encrypted with AES-256-GCM (Apple CryptoKit) using a key derived from your passphrase via PBKDF2-HMAC-SHA256 (Apple CommonCrypto). You choose where the file goes through the iOS share sheet. Your passphrase is never stored anywhere, and we never receive the file. A wrong passphrase or a tampered file fails to decrypt without revealing any contents.

6. Clipboard

When you copy a password or code, the App uses the native pasteboard with an automatic expiration (~40 seconds) so iOS clears it on its own, and with a local-only flag so the value does not sync to your other devices via Universal Clipboard / Handoff.

7. Camera

The App requests camera access only to scan authenticator (TOTP) setup QR codes when you choose to add a code. Camera frames are processed on-device to read the code and are never stored or transmitted. If you deny camera access, you can still add codes by entering a secret manually.

8. Analytics, Advertising & Tracking

The App contains no third-party analytics, advertising, or behavioural-tracking SDKs, and no device identifiers (such as IDFA) are used. We do not participate in ad networks or sell data — there is no data to sell. Your device's operating system may independently generate crash reports subject to the OS privacy settings you have configured; forcerocket does not receive or process such reports.

9. The Web Tool

The web-based password generator runs entirely in your browser using the Web Crypto API. Passwords are generated on your device and are never sent to, logged by, or stored on any server. The page is served as static files and self-hosts its fonts, making no third-party requests of its own.

10. Children's Privacy

The App is a general-purpose utility and is not directed at children. We do not knowingly collect any personal information from anyone (including children) because we do not collect personal information at all.

11. App Privacy “Nutrition Label”

Consistent with the above, Forcekeyper's App Store privacy disclosure is “Data Not Collected.” Saved credentials are stored on-device / in your own iCloud Keychain and are not accessible to the developer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated “Last Updated” date. Continued use after any change constitutes acceptance of the revised Privacy Policy.

13. Contact

For privacy-related questions, contact us at: [email protected].

Terms of Use

Last Updated: August 18, 2026

These Terms of Use (“Terms”) govern your access to and use of the Forcekeyper iOS application and the associated web-based password generator (together, the “App”), developed and operated by forcerocket. By downloading, installing, or using the App, you agree to be bound by these Terms in full. If you do not agree, do not use the App.

1. Eligibility

You must be old enough to form a binding contract in your jurisdiction and to accept Apple's terms for the App Store. By using the App, you represent and warrant that you meet these requirements.

2. Licence Grant

Subject to your compliance with these Terms, forcerocket grants you a limited, non-exclusive, non-transferable, revocable licence to install and use the App on a device that you own or control, solely for your personal or internal business purposes.

3. Acceptable Use

You agree not to:

• Use the App for any purpose that is unlawful or prohibited by these Terms;
• Reverse-engineer, decompile, disassemble, or attempt to derive the source code of the App, except to the extent this restriction is prohibited by applicable law;
• Modify, adapt, translate, or create derivative works based on the App;
• Remove, alter, or obscure any proprietary notices, labels, or marks on the App;
• Use the App to store or manage credentials you are not authorised to possess.

4. Your Responsibilities & Recovery

YOU ARE THE ONLY KEEPER OF YOUR DATA. Because the App is offline and we operate no server, we cannot see, recover, reset, or restore your passwords, authenticator secrets, backup passphrases, or any other content. You are solely responsible for:

• Remembering any backup passphrase you set — a lost passphrase means the encrypted backup cannot be decrypted by anyone, including us;
• Maintaining device access (Face ID / Touch ID / passcode) and your Apple Account, including iCloud Keychain settings, if you rely on sync for recovery;
• Keeping your own backups of critical credentials.

5. Third-Party Services & Platforms

The App relies on Apple platform services (Keychain, iCloud Keychain, CryptoKit, the pasteboard, and biometrics). Your use of those services is governed by Apple's terms and privacy policy. Authenticator (TOTP) functionality follows the open RFC 6238 standard; compatibility with any particular service is not guaranteed. Push-based or proprietary multi-factor systems (for example Salesforce Authenticator, Duo Push, Microsoft Authenticator push, Okta Verify, and Authy push), HOTP, and Steam Guard are not supported by design.

6. App Store Distribution

The App is distributed through Apple. You acknowledge that these Terms are between you and forcerocket only, and not with Apple, Inc. Apple is not a party to these Terms and bears no responsibility for the App or its content. Apple has no obligation to furnish maintenance or support for the App; any such support is the sole responsibility of forcerocket. Apple's standard licensed-application end-user licence agreement applies where these Terms are silent or where applicable platform terms take precedence by law.

7. Pricing

The App and the Web Tool are provided free of charge. forcerocket reserves the right to introduce optional paid features in the future; any such terms will be presented at the point of purchase.

8. Intellectual Property

The App and its original content, features, and functionality are and will remain the exclusive property of forcerocket. The App is protected by copyright, trademark, and other laws of India and foreign countries. Our trademarks may not be used in connection with any product or service without our prior written consent. “Apple,” “Face ID,” “Touch ID,” and “iCloud” are trademarks of Apple Inc.; “Google Authenticator” is a trademark of Google LLC. forcerocket is an independent developer and is not affiliated with, endorsed by, or sponsored by these companies.

9. Disclaimer of Warranties

THE APP IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTY OF ANY KIND. To the maximum extent permitted by applicable law, forcerocket expressly disclaims all warranties, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the App will be error-free, uninterrupted, or secure, or that generated passwords will be accepted by, or adequate for, any particular service.

10. Limitation of Liability

To the fullest extent permitted by law, in no event shall forcerocket, its developers, officers, or affiliates be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of profits, data, goodwill, or business, or loss of or inability to recover credentials — arising from your access to, use of, or inability to use the App. Where liability cannot be excluded by law, our total aggregate liability is limited to INR 100 (one hundred Indian Rupees).

11. Indemnification

You agree to indemnify, defend, and hold harmless forcerocket, its developers, officers, and affiliates from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or connected with your use of the App, your violation of these Terms, or your violation of any rights of a third party.

12. Termination

We may terminate or suspend availability of the App at any time. Upon termination, your right to use the App will cease; data already stored on your device or in your iCloud Keychain remains under your control. Provisions that by their nature should survive termination shall survive, including ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

13. Governing Law & Jurisdiction

These Terms and any disputes arising from them shall be governed exclusively by the laws of India, without regard to conflict-of-law principles. You agree to submit to the personal jurisdiction of the competent courts of India for the resolution of any disputes.

14. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect.

15. Changes to These Terms

We may update these Terms of Use from time to time. Changes will be reflected on this page with an updated “Last Updated” date. Continued use of the App after any change constitutes your acceptance of the revised Terms.

16. Contact

For questions or legal notices regarding these Terms, contact us at: [email protected].