Loksi apps privacy

The Loksi apps for iPhone, Android, macOS and Windows, and the extension for Chrome, Edge and Firefox, are published by ALEOP SAS, 99 vieille route de la Gavotte, Les Bastides du Cèdre, 13170 Les Pennes Mirabeau, France. Data protection officer: dpo@aleop.eu.

Your vault belongs to your company. Your company decides who can access it, and it is responsible for the data it stores there. When Aleop hosts this vault, Aleop acts on its behalf, under the terms of the data processing agreement (in French).

• No advertising, no trackers, no audience measurement.
• No crash reports sent automatically.
• No data sent to Aleop outside your vault, and none to a third party unless you ask for it.

The vault whose address you enter, the one given to you by your company's administrator. As long as no address is entered, the app does not contact any server.

There are two exceptions, only when you trigger them. "Check if password has been exposed" queries the public Have I Been Pwned service. It only receives the first five characters of a hash of the password, never the password itself. The email alias generator goes through the service you have set up with your own key, for example SimpleLogin or Firefox Relay.

Your logins, passwords, notes and files are encrypted on your device before they are sent. Neither the server nor Aleop can read them. The server does know your email address, your name, your account settings, the devices connected to your account (a device identifier created by the app, the device name and type, used for known devices and login requests) and technical logs (IP address, date and time). Details and retention periods are in the data processing agreement (in French).

• An encrypted copy of your vault, so you can access it offline.
• Unlocking with Face ID, Touch ID or fingerprint is handled by the system. The app never receives your biometric data.
• Diagnostic logs are only recorded if you turn them on ("Flight recorder"). They stay on the device and are only sent if you choose to share them.
• Deleting the app erases this data from the device. Your vault stays on your company's server.

Each one is only requested when you use the feature, and you can refuse it.

• Camera: scan a two-step login QR code or a payment card.
• Photos: attach or share a file.
• NFC: use a YubiKey security key.
• Face ID or fingerprint: unlock the vault.
• Notifications: be told about a login request to your account.
• Autofill: suggest your logins in apps and websites, once you have turned it on in the phone's Settings.

On Android, you can also turn on autofill through the accessibility service, as an option. It reads the screen of other apps to find the fields to fill. What it reads stays on the phone, nothing is sent. Android also lets you use Loksi for your passkeys and add a tile to Quick Settings.

• Each time it starts, the app writes into the folders of the installed browsers what it needs to talk to the Loksi extension, and reads their profiles to find the extension. Nothing it reads there leaves the computer.
• If you turn it on, the app can also act as an SSH agent for keys stored in your vault.
• No automatic updates: the app does not contact any update server.

The Loksi extension for Chrome, Edge and Firefox follows the same rules as the apps. It contacts the vault whose address is shown on the login screen, under "Accessing". What is specific to the extension:

• To find the fields to fill, it reads the forms on the pages you open. This reading happens in the browser, nothing from it is sent.
• An encrypted copy of the vault is kept in the extension's storage. Removing the extension erases it.
• If you ask to "Check if password has been exposed", the extension queries the public Have I Been Pwned service. It only sends the first five characters of a hash of the password, never the password itself, and does nothing without your click.
• Email aliases from the generator only go through a third-party service, for example SimpleLogin or Firefox Relay, if you set one up with your own key.

Browser permissions: read and change pages to fill in your logins, the clipboard to copy a password and then clear it, notifications to offer to save a login, and idle detection to lock the vault. Two permissions are only requested when used: talking to the desktop app for biometric unlock, and turning off the browser's built-in password manager if you choose to.

To show a website's icon next to your logins, the app asks your vault for the icon, and the vault fetches it from the website. The website sees your vault's server, not your device. You can turn this off in Settings, Appearance, "Show website icons".

You can delete your account yourself from the app: Settings, Account security, Delete account. The other ways and what is deleted are described on the page Delete your Loksi account.

To access or correct your data, first contact your company's administrator, who manages your account. You can also write to dpo@aleop.eu. If you disagree, you can contact the CNIL (cnil.fr).

The privacy policy of the aleop.eu website is on a separate page (in French).