Privacy policy

Effective date: 27 October 2026

Tasche (“the app”, “we”) is a personal wallet app for Android. It lets you store your own cards and documents, such as IDs, bank cards, passports, addresses and passwords, on your phone. This policy explains what data the app handles and how it is protected. In short: your data stays on your phone, encrypted. We do not run any server, and we never see, collect, share or sell the data you keep in the app.

1. Data you store in the app

The cards, fields, notes, section names and photos you add are stored only on your device, in an encrypted database. Photos are encrypted with a separate key. The encryption keys are protected by the Android Keystore of your phone. This data is not sent to us or to anyone else.

2. Section codes

If you lock a section with a 4- or 6-digit code, the app stores only a salted, one-way hash of the code (Argon2id), never the code itself.

3. Google sign-in (optional)

You can use Tasche without an account. If you choose “Sign in with Google”, the app receives your name, email address, profile picture and Google account ID from Google. These are stored only on your device. The app uses them to show your account in the app and to make sure Drive sync uses the right Google account. You can sign out at any time in Settings.

4. Google Drive sync (optional)

If you turn on Drive sync, the app uses the Google Drive permission drive.appdata. This gives Tasche access only to a hidden folder that belongs to Tasche in your own Google Drive. Tasche cannot see, open or change any other file in your Drive.

• Before anything is uploaded, it is encrypted on your phone with a key made from your sync passphrase (Argon2id and AES-256-GCM).
• Only someone with your passphrase or recovery key can decrypt it. We cannot, and Google cannot.
• The data is stored in your own Google account. Google's privacy policy applies to Google's services.
• You can disconnect Drive in Settings and choose to delete Tasche's data from your Drive. You can also remove it at drive.google.com, under Settings > Manage apps.

Tasche's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Encrypted backups (optional)

You can export an encrypted backup file and save it wherever you choose. The file is protected by a password you set. We never receive it.

6. Permissions

• Camera: only when you choose to photograph a card. Photos are encrypted right away, and location data (EXIF/GPS) is removed.
• Photos: the app uses Android's photo picker, so it only sees the pictures you pick.
• Internet: used only for Google sign-in and Drive sync, if you turn them on.
• Biometrics: used only to confirm it's you, for example when you reset a forgotten section code. Your fingerprint or face data never leaves Android's secure hardware.

7. What we do not do

• No servers: the app has no backend, and your app data never reaches us.
• No ads, no analytics, no tracking and no third-party SDKs that collect data.
• No selling or sharing of data with anyone.

8. Deleting your data

Settings > Data > Erase all data wipes everything Tasche stored on the phone, including the keys. Uninstalling the app also removes it. Data you synced to Drive can be deleted when you disconnect Drive, or from your Google account as described above.

9. Early access sign-up on this website

This applies only to the website, not the app. If you enter your email in the “Get early access” form, we store your email address, the date, and whether you asked to join testing, in a private Google Sheet that only the developer can open. We use it only to tell you when Tasche is available or to invite you to the test on Google Play. We do not share it, and we delete it when you ask, or once the app is publicly released and you have been told. To be removed, email the address below.

10. Children

Tasche is intended for adults (18+) and is not directed at children.

11. Changes

If this policy changes, we will update this page and the effective date above.

12. Contact

Questions about privacy: talha.wien3110@gmail.com