Legal
Privacy Policy
Last updated: May 2026
Overview
BUNKR is a local-first password manager. Your vault never leaves your device unencrypted. This policy explains what data is handled, how, and why.
Core principle: BUNKR does not collect, transmit, or sell your personal data. All sensitive information is encrypted on your device before any sync occurs.
Data stored locally
All vault data is generated and stored locally on your device. This includes:
- Passwords and credentials you save
- Notes and metadata associated with your entries
- App configuration and preferences
This data is encrypted using AES-256 encryption before being written to disk. BUNKR does not have access to your master password or the contents of your vault.
Google Drive sync
BUNKR optionally integrates with Google Drive to back up and synchronise your encrypted vault. When this feature is enabled:
- Your vault file is uploaded to your personal Google Drive in encrypted form
- BUNKR only accesses files it creates — using the
drive.filescope - BUNKR cannot read, modify, or delete any other files in your Drive
- Google may log access events as part of their own service — see Google's Privacy Policy
Important: The AES-256 encrypted vault uploaded to Drive cannot be read by anyone without your master password — not by BUNKR, not by Google, not by us.
Google account access
When you sign in with Google to enable Drive sync, BUNKR receives:
- Your Google account email address — used only to identify your Drive session
- An OAuth access token — used exclusively to write and read your vault file on Drive
This information is stored locally on your device and is never transmitted to any BUNKR servers.
Data we do not collect
BUNKR does not collect, store, or transmit:
- Your master password or any derived keys
- The contents of your vault in decrypted form
- Usage analytics or telemetry
- Crash reports or diagnostic data
- Any data to third-party advertising or analytics services
Third-party services
BUNKR uses Google Drive as an optional sync backend. Your use of Google Drive is subject to Google's own terms and privacy policy. BUNKR has no affiliation with Google.
Changes to this policy
If this policy changes materially, the updated version will be published at this URL with a new effective date. Continued use of the app after changes constitutes acceptance of the updated policy.