Arca
← Home Privacy Policy
Google Play Data Deletion Policy Compliance

Account & Data Deletion

Arca operates on a 100% offline-first, zero-knowledge architecture. You have absolute ownership and control over your data.

Application: Arca Package Name: com.pixra.arca Developer: Pixra Labs
Important: Zero-Knowledge & Permanent Deletion

Because Arca uses client-side envelope encryption (Argon2id + XChaCha20-Poly1305), Pixra Labs never has access to your Master Password, your cryptographic keys, or your unencrypted vault.

Once data or an account is deleted, it is permanently wiped and mathematically unrecoverable. Neither you nor Pixra Labs engineers can restore deleted items or vaults.

1

How to Delete an Individual Vault Item

If you want to delete a single password, login, note, or credential from your vault:

  1. Open the Arca app on your Android device or browser extension.
  2. Unlock your vault using your Master Password or Biometrics (Fingerprint / Face Unlock).
  3. Locate and tap on the credential item you wish to remove.
  4. Tap the Delete (Trash icon) button at the bottom of the item details view.
  5. Confirm the deletion prompt.
Security Action: The record is zeroized in RAM and permanently deleted from local storage with PRAGMA secure_delete = ON.
2

How to Delete the Entire Account & Wipe All Vault Data

To completely erase your account, all credentials, encryption keys, and sync history:

  1. Open the Arca application.
  2. Go to the Settings tab (gear icon).
  3. Scroll down to Danger Zone or Account & Security.
  4. Select Delete Account & Reset Vault.
  5. Confirm the prompt by typing your Master Password or confirming the irreversible wipe.

What happens upon confirmation:

  • Local Database Destroyed: All SQLite / IndexedDB databases containing encrypted items and vault headers are immediately wiped.
  • Hardware Keys Erased: Android StrongBox / Keystore biometric credentials and wrapping keys are irreversibly cleared.
  • Blind Sync Purge: If optional Blind Sync is active, an authenticated deletion packet signed by your local Ed25519 key is sent to the sync relay server to immediately wipe all remote encrypted sync blobs.
3

Immediate Device Wiping via Android Settings

Because Arca stores all your credentials locally in secure app-private storage:

  • Clearing App Data: Opening Android Settings → Apps → Arca → Storage & Cache → Clear Storage immediately purges all encrypted databases and keys.
  • Uninstalling the App: Uninstalling Arca from your device automatically removes all local databases, application data, and cached envelopes permanently.

Data Retention Timeline

Retention Period: 0 Days (Immediate). We do not operate shadow backups or retention queues. When an item or account is deleted, the data is removed immediately. No cached copies or logs containing user data exist on our infrastructure.

Assistance & Deletion Verification

If you have questions about data deletion or need help verifying that your relay account has been wiped, contact our Security and Privacy team:

Email: security@pixra.dev
Organization: Pixra Labs
Project Repository: github.com/pixralabs/arca