Pyramidion Privacy Policy
Effective date: October 14, 2026 · Applies to: Pyramidion Password Manager for iOS and macOS (the "App"), published by BlackBox Systems L.L.C. ("we," "us," "our").
Summary
Pyramidion is a local-first password manager: your vault is encrypted on your device and we never receive it. Specifically:
- No account. There is no sign-up, login server or user profile held by us.
- No vault access. Your passwords, notes, keys, two-factor secrets, payment cards and master password never leave your device in readable form, and we cannot decrypt them.
- No tracking. The App contains no analytics, advertising, crash-reporting or telemetry SDKs, and we do not sell or share personal information.
- Limited network use. The App goes online only to (1) check and process subscriptions through Apple and our subscription service provider, and (2) upload encrypted backups to your own iCloud account, if you turn that on.
This summary is for convenience; the full policy below controls.
1. Information the App handles
The only information we, or our service providers, receive is subscription and device-identifier data needed to deliver paid features. Everything else stays on your device.
| Category | Examples | Where it goes |
|---|---|---|
| Vault contents | Passwords, password history, secure notes, two-factor (TOTP) secrets, payment cards, cryptographic and post-quantum keys, peer public keys, signatures, tags, favorites | Encrypted on your device only. Never sent to us. |
| Master password, PIN, recovery phrase | Your passphrase, PIN code, Rescue Kit mnemonic and QR code | Never stored in recoverable form and never transmitted. |
| Encrypted backups | Locked, signed copies of your vault | Your device or your private iCloud account (Apple devices). Never sent to us. |
| Purchase and entitlement data | Products purchased, subscription status, expiration and renewal dates, an anonymous app user ID | Apple, and our subscription service provider, to validate your subscription. |
| Device identifier | A per-app device ID: Apple's identifier for vendor on iOS, or a one-way hash of the hardware identifier on macOS | Our subscription service provider, attached to your subscription record. |
| Diagnostic logs | App events, errors, device model and OS version | Your device only (see Section 5). |
What we do not collect: your name, email address, phone number, contacts, photos, browsing history, location, advertising identifiers, or any content of your vault.
2. How your data is stored and protected
Your vault is encrypted on your device with keys derived from your master password, and we hold no copy of those keys.
- On-device encryption. Vault items are encrypted before they are written to storage. Key material is kept in your platform's secure storage (the Apple Keychain) and is available only while your device is unlocked.
- No recovery by us. We have no master key, backdoor or reset process. If you lose your master password and your recovery materials, no one, including us, can recover your data.
- Biometric and PIN unlock. Face ID, Touch ID or fingerprint unlock is performed by your operating system. The App receives only a pass/fail result and never sees or stores your biometric data.
- Clipboard. Copied secrets are set to expire from the clipboard after 90 seconds where the platform supports it, and the App clears them when you return to it if they are still there.
- Auto-lock. The App locks after a period of inactivity that you choose.
No method of storage is perfectly secure. We cannot guarantee security against a compromised device, operating system or future cryptanalytic advance.
3. Backups and sync
Backups and sync are optional, are controlled by you, and only ever move encrypted data to storage you own.
- Local backups. The App writes encrypted, signed backups to its own storage on your device.
- iCloud backup (iOS and macOS). If you turn on "Save to iCloud," encrypted backups are uploaded to your private iCloud database through Apple's CloudKit. Alongside each backup, Apple stores only its format version, creation time, platform, size and checksum. Your vault's name and contents stay inside the encrypted payload. You can delete any or all cloud backups from within the App.
- Keychain sync (Apple devices). Certain vault key material may be stored as synchronizable in your iCloud Keychain so your vault can open on your other Apple devices. Apple encrypts and syncs this data under its own terms; diagnostic-log keys are never synced.
iCloud and iCloud Keychain are Apple services governed by Apple's Privacy Policy. We cannot access your iCloud account or anything stored in it.
4. Device permissions
The App asks for a permission only when you use the feature that needs it, and you can revoke any of them in your device settings.
| Permission | Used for | Leaves your device? |
|---|---|---|
| Face ID / Touch ID / fingerprint | Unlocking the App | No. Handled by the operating system. |
| Camera | Scanning QR codes for two-factor setup, peer keys and recovery codes | No. Frames are processed on-device and not saved. |
| iCloud | Optional encrypted backups and keychain sync | Only to your own iCloud account. |
5. Diagnostic logs
The App keeps a tamper-evident diagnostic log on your device to help you troubleshoot; it is never uploaded to us.
- What it records: app events and errors (for example, "backup completed" or "restore failed"), timestamps, and device details such as model, operating-system version and the App's device ID. On iOS this may include your device's name as set in Settings. It does not record vault contents, passwords or keys.
- Retention: log entries are deleted automatically after 90 days, and all logs are erased when you delete your vault data.
- Sharing: you can view logs in Settings → Advanced → Diagnostics. They reach us only if you choose to send them, for example in a support request.
6. Third-party services
We share data with only the services needed to sell and validate subscriptions, and we never sell personal information or use it for advertising.
| Provider | What it receives | Purpose | Policy |
|---|---|---|---|
| Apple (App Store, iCloud) | Purchase and payment details; your encrypted backups and synced keychain items, if enabled | Billing, subscription management, optional backup and sync | Apple Privacy Policy |
| Subscription service provider | Anonymous app user ID, App device ID, purchase history and subscription status, basic device and app-version data | Validating entitlements and restoring purchases | Name available on request |
We never see your payment card details; Apple processes all payments. We may disclose information we hold if required by law, but because we do not hold your vault, we cannot disclose its contents.
7. Retention, deletion and your rights
Because your data lives on your device, you control it directly and can delete it at any time.
- Vault data: kept until you delete it. Use the App's delete-vault option, or uninstall the App and erase its keychain entries. Deletion on your device is permanent.
- iCloud backups: kept in your iCloud account until you delete them in the App or in your iCloud settings.
- Subscription data: retained by Apple and our subscription service provider for as long as needed to provide the subscription and meet legal and tax obligations, under their own policies.
Your rights. Depending on where you live, including under the EU/UK GDPR and U.S. state laws such as the California Consumer Privacy Act, you may have the right to access, correct, delete or port your personal information, to object to or restrict processing, and to not be discriminated against for exercising these rights. Most of these you can exercise yourself in the App. For subscription records, contact us at support@bbxsys.com and we will work with our subscription service provider to fulfill your request; we may need your App device ID or purchase receipt to locate them. You may also complain to your local data-protection authority.
Legal bases (EEA/UK). We process subscription data to perform our contract with you, and diagnostic data on your device under our legitimate interest in keeping the App reliable.
International transfers. Our service providers may process subscription data in the United States and other countries, under safeguards such as Standard Contractual Clauses.
8. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from them.
9. Changes to this policy
We will post any update on this page and change the effective date above. For material changes, we will also give notice in the App or on www.bbxsys.com at least 30 days before they take effect.
10. Contact us
BlackBox Systems L.L.C.
- Support and other requests: support@bbxsys.com
This policy should be read together with our Terms of Service.