1. Introduction & Core Philosophy
Pixra Labs ("we", "us", "our") develops Arca (com.pixra.arca), a 100% offline-first, zero-knowledge password manager and 2FA authenticator.
Our privacy architecture is governed by a fundamental cryptographic principle: what we cannot see, we cannot compromise. Arca requires no email registration, no account creation, no cloud signup, and communicates with zero tracking or telemetry servers.
2. Data We Do NOT Collect
Unlike conventional password managers, Arca does not operate a centralized user database:
- No Master Passwords: Your Master Password is never transmitted over any network or stored in plaintext.
- No Vault Contents: We have zero access to your saved passwords, usernames, secure notes, TOTP seeds, or credit card numbers.
- No Telemetry or Usage Analytics: We do not track clicks, feature usage, session duration, or user journeys.
- No Crash Reports with Personal Data: We do not bundle third-party crash reporting SDKs that dump device memory or identifiers.
- No Advertising or Marketing IDs: Arca contains zero advertising networks, tracking beacons, or cross-app tracking SDKs.
3. Local Storage & Cryptographic Security
All your credentials and sensitive assets are encrypted locally on your device prior to being stored in the local SQLite/IndexedDB database:
PRAGMA secure_delete = ON4. Android Device Permissions Explained
To deliver core functionality without compromising security, the Android application requests only the following permissions:
Purpose: Strictly utilized when you explicitly enable optional multi-device synchronization with a self-hosted or trusted Blind Relay server. When sync is disabled, the app operates 100% offline and initiates zero network requests.
Purpose: Allows you to unlock your local vault conveniently using Android BiometricPrompt (fingerprint or face unlock). Biometric verification occurs strictly inside the device hardware (StrongBox / Secure Enclave). Arca never receives or stores raw biometric data.
Purpose: Enables the native Android Autofill framework to detect login input fields and suggest your stored credentials. Field matching is computed entirely offline on your device, and no screen contents or visited URLs are transmitted.
5. Optional Blind Sync & Ephemeral Sharing
If you opt into cross-device sync:
- The relay server only receives 256-byte padded encrypted blobs authenticated by detached
Ed25519signatures. The server cannot decrypt or inspect these blobs. - For ephemeral one-time credential sharing, encryption keys reside exclusively in the URL fragment (hash
#), meaning the relay server never receives the decryption key. Secrets burn and self-destruct upon redemption.
6. Data Retention & User Deletion Rights
You retain complete and exclusive ownership of your data at all times:
- Local Deletion: Uninstalling the application or using "Clear Storage" in your device settings immediately and permanently destroys all local encrypted vault databases and encryption keys.
- Remote Deletion: If you use the optional sync relay, you can revoke any device, disconnect sync, or wipe your remote ciphertext store directly from the Settings menu.
7. Children's Privacy (COPPA Compliance)
Arca is a general-purpose security utility and does not target or knowingly collect data from children under the age of 13. Because our service collects zero personal information, no child data is ever processed or stored.
8. Open Source Verification & Reproducibility
Arca is free software licensed under the GNU Affero General Public License v3.0 (AGPL-3.0). Every line of source code, cryptographic primitive, and build script is publicly inspectable and verifiable on GitHub at:
9. Developer Contact Information
For any privacy inquiries, security reports, or technical questions regarding this policy, please contact: