Privacy Policy

Last updated: November 2, 2026

1Key is a password manager for iPhone and Android made by DanaExperts ("we", "us"). This policy explains what data the 1Key app and the website 1key.id.vn collect, why, who else handles it, and the choices you have.

The short version

Your vault is encrypted on your phone. We cannot read your passwords, cards, addresses, contacts or notes, and we never see your master password or recovery key.
To run the service we keep your email address, some details about your items that are not secret (listed below) and technical data such as device and notification IDs.
The app shows ads from Google and uses Google Firebase for notifications, usage statistics and crash reports.
We do not sell your personal data.

What we can't see

Everything you save in your vault is encrypted on your device before it is backed up, with a key that only your master password or recovery key can unlock. That includes item names, website addresses, usernames, passwords, card numbers, addresses, contact details, notes, custom fields and category names. Items you share are encrypted for each person you share them with.

Your master password and recovery key never leave your phone. We only store a value made from them that lets us check it is you, and it cannot be turned back into your password. This is also why we cannot recover your vault without your master password or recovery key.

Face ID, Touch ID and fingerprint unlock are handled by your phone. We never receive your face or fingerprint data.

What we collect

Account. Your email address. If you sign in with Google or Apple, also your name and, for Google, a link to your profile photo. We email you a code when you sign up or reset your master password.

Vault details that are not encrypted. To sync and organise your vault, our servers see each item's type (password, card, address or contact), when it was created, changed or deleted, its strength rating (weak to very strong), settings such as pinned or "require master password", which category it is in, and the country of an address or phone number.

Sharing. When you share an item: the recipient's email address, whether they accepted it and whether they can see the password. If the recipient has no 1Key account yet, we keep their email address for the invitation and send them an email. Recipients see your name or email address in the notification and email.

Devices and notifications. Your device type (iOS or Android), a device ID for your sign-in sessions and a notification token. Notifications never contain vault contents; a share notification shows who shared and the type of item.

Website icons. To show a website's icon, the app sends the website's domain (for example netflix.com) to Google's icon service and to that website. Your usernames and passwords are never sent.

Usage and crash data. Firebase Analytics and Crashlytics (Google) receive app usage events, your device model and system version, and crash reports. They never receive vault contents. On iPhone you can turn them off by not allowing tracking when the app asks.

Ads. The app shows full-screen ads from Google AdMob, for example when you save or share an item. Google may collect your device's advertising ID, IP address and how you interact with ads in order to show and measure them. On iPhone, Google can only use the advertising ID if you allow tracking. You can limit ad personalisation in your phone's settings.

Server logs. Our servers log technical details of each request, such as the time, the address requested, the app platform and, in some requests, an email address. We use them to keep the service running and secure, and keep them only for a short time.

Website. 1key.id.vn uses Google Analytics, which sets cookies to count visits, and loads fonts from Google Fonts. The invitation page that share emails link to does not use Google Analytics.

We don't access your location, address book, photos or camera. Contacts are only imported from a file you choose.

How we use it

To create and protect your account, sign you in and send sign-up, reset and sharing emails.
To back up your vault and sync it across your devices.
To deliver the items you share and let people know about them.
To show ads that keep 1Key free.
To fix crashes, prevent abuse and improve the app.

Who helps us run 1Key

Amazon Web Services hosts our servers, database, encryption keys and notification delivery in Mumbai, India.
Google provides Google Sign-In, Firebase Cloud Messaging, Firebase Analytics, Crashlytics, AdMob, Google Analytics, Google Fonts and the website icon service.
Apple provides Sign in with Apple and Apple Push Notifications.
Our email provider sends sign-up codes and invitation emails.

Each of them handles data under its own privacy policy. Your data may be processed outside your country, mainly in India and wherever Google and Apple operate. We also disclose data when the law requires it, and if 1Key is sold or merged your data may move to the new owner; we will tell you before that happens.

How long we keep it

Your account and encrypted vault: while your account exists. Items you delete are kept, still encrypted, so the deletion reaches your other devices, until your account is deleted.
Invitations to people without an account: until they sign up or ask us to remove them.
Server backups: up to 7 days.
Failed email and notification jobs: up to 7 days.

Your choices and rights

See and export your vault at any time in the app. Exported files are not encrypted, so keep them somewhere safe.
Correct your details in the app.
Delete your data. "Delete account" in the app removes your account from that phone. To delete it and all its data from our servers, email us from your account's email address and we will do it within 30 days.
Turn off notifications, tracking and ad personalisation in your phone's settings.
Ask us what data we hold about you, or complain to your local data protection authority.

Privacy Policy

The short version

What we can't see

What we collect

How we use it

Who helps us run 1Key

How long we keep it

Your choices and rights

Security

Children

Changes

Contact