OneTwo SafeThis is a courtesy translation. The German version at onetwosafePrivacy.html is legally binding.
This privacy policy applies specifically to the OneTwo Safe app (iPhone, iPad and Mac) and supplements the general privacy policy of this website, which covers visiting the website itself.
1. Controller
Christian Drapatz
Kämpenstraße 42
45147 Essen
Germany
Email: support@onetwoapps.com
2. Basic principle: local data processing
OneTwo Safe stores all entries, attachments, tags and settings on your device. Entries are stored there in encrypted form. There is no server of the developer to which this data is transmitted, no user account, no tracking and no advertising. No analytics, advertising or other third-party SDKs are included; the app uses Apple frameworks only. The developer receives no data from the app.
3. What data you process in the app
What you store (e.g. credentials, card data, ID data, notes, photos and documents as attachments) is entirely up to you. The app processes it only to display, search, copy and manage it for you. Search, filters and the security check (weak and reused passwords) run on your device in memory only; no password is sent to the internet for this.
4. Protection of data on the device
- Encryption: Entries are encrypted with AES-256-GCM using Apple's CryptoKit. The data key is kept in Apple's keychain.
- Unlocking: The app uses Apple's LocalAuthentication service (Face ID, Touch ID, device passcode or Mac password). Biometric data is not accessible to the app and is neither stored nor transmitted; the system only reports whether the check succeeded.
- Master password (optional): It is not stored in plain text and is not transmitted anywhere. A forgotten master password cannot be reset.
- Clipboard: Values you copy are removed from the clipboard after the set time, provided it hasn't been changed in the meantime.
5. iCloud sync (optional)
Sync is off at first and can be turned on and off under Settings › iCloud. If you turn it on, your entries are synchronized between your Apple devices via the private CloudKit database of your own iCloud account. Entries are encrypted on the device before upload. The developer has no access to them. Transfer takes place via Apple's infrastructure; Apple's privacy terms apply: apple.com/legal/privacy. Depending on your system settings, the data key may reach your other devices via iCloud Keychain. For syncing, the app uses silent CloudKit notifications (push). Turning sync off does not delete any entries.
6. Mac: “Local File”
On the Mac you can choose “Local File” mode instead of iCloud. The entries are then stored in an encrypted file that you place at a location of your choice (e.g. a network share or external drive; locations in iCloud Drive are rejected). iCloud stays off on that Mac. The Mac also keeps an encrypted working copy in the app's container. To access the file, the app stores a reference (security-scoped bookmark) to the file you selected.
7. Notifications
If you turn on reminders before expiry, the app asks for notification permission only then. The reminders are generated locally on your device and contain no entry names.
8. Files, photos, links and contacts
Attachments, backups and imports use the system's file and photo pickers; the app only gets access to what you select and needs no access to your entire photo library. Websites, phone numbers and email addresses from your entries are opened only on your action via the system (browser, phone, mail). The app does not access your address book.
9. Backups and imports
Backups are created as an encrypted file with a backup password you choose, which is stored nowhere. You decide where to save or send the file. Imported JSON files are read on the device only.
10. Contact by email
If you write to support, I process your email address and the content of your message to answer your request. Please do not send passwords or other secrets by email.
11. Legal basis
Where personal data is processed, this is done to provide the app functions you request (Art. 6(1)(b) GDPR). For optional iCloud sync and optional notifications, it is your consent by turning on the feature (Art. 6(1)(a) GDPR). Answering support requests is based on Art. 6(1)(b) or (f) GDPR.
12. Disclosure to third parties
Your app data is not disclosed to third parties, except for the technically necessary processing by Apple described above in the context of iCloud/CloudKit, keychain and the Apple services used, where you use them.
13. Your rights
Your app data is on your device or in your own iCloud account; you can view, edit, export and delete it in the app at any time. In addition, subject to the statutory requirements, you have the rights of access, rectification, erasure, restriction of processing, objection, data portability and the right to lodge a complaint with a data protection supervisory authority.
14. Last updated
Last updated: October 2026