Quartz Locker: Grade-A Security You Can Trust.

Last Updated: April 12, 2026

MobSF-Analyzed: Quartz Locker holds a Grade A security rating (96/100 Low Risk), analyzed using MobSF — OWASP’s open-source mobile security framework.

OWASP MASVS Compliant: Quartz Locker fulfills the highest global checklist standards set by the Open Worldwide Application Security Project (OWASP) Mobile Application Security Verification Standard across MASVS-STORAGE, MASVS-CRYPTO, MASVS-AUTH, MASVS-PRIVACY, and MASVS-NETWORK.

Privacy-First: Zero privacy trackers. We prioritize data minimization and strict privacy principles, following strict global data minimization principles. 100% Offline-Only application.

Modern Protection: Built on Android SDK 35 for maximum compatibility and layered hardware defense.

---

1. Data Collection & Transmission

Zero Trackers & Minimal Data: In compliance with global data minimization principles, we collect exactly zero data. There are 0 trackers, no analytics SDKs, and no metrics collection.

Zero Internet: This app does not have the INTERNET permission. We cannot collect, see, or transmit your data to any external servers.

Local-Only Storage: 100% of your vault data, passwords, and file attachments stay on your physical device. The data is stored in a highly encrypted SQLite database (utilizing 256-bit AES SQLCipher encryption).

2. Third-Party Services

Quartz Locker does not use any third-party analytics trackers (such as Firebase, Mixpanel, or Facebook SDK). We do not use advertising SDKs.

The only third party involved is the Google Play Store, which handles your initial download and app updates. Their privacy policy applies to those actions.

3. Device Permissions

Quartz Locker requests only the minimum permissions necessary to function:

• Biometric/Fingerprint: Used locally to unlock your vault. Your biometric data is handled by the Android system; Quartz Locker never sees or stores it.
• Storage (Photos/Media/Files): Used exclusively when you choose to "Export" a backup file or "Import" a previous backup.

4. Security Standards

We protect your offline data using industry-standard protocols:

• SQLCipher: 256-bit AES encryption for the entire database.
• PBKDF2 Key Derivation: 600,000 iterations to protect against brute-force attacks.
• AES-256-GCM: Military-grade encryption for all saved file attachments.

5. Children’s Privacy

Our application does not address anyone under the age of 13. Since we do not collect any data, we do not knowingly collect personally identifiable information from children.

6. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy inside the App and updating the "Last Updated" date on this page.

7. Contact Us

If you have any questions about this Privacy Policy, you can contact the developer at: helloquartzlocker@proton.me