Fobb SecurityFobb Security ("Fobb", "we", "our") is a password manager built so that your vault — every password, note, and two-factor secret you store — is encrypted on your own device and never readable by us. Fobb Security is operated by Tisfoon Investment Corp. This page explains exactly what data our servers do and do not see.
What never leaves your device unencrypted
- Your vault contents — website logins, passwords, passkeys, notes, security questions, and two-factor (TOTP) secrets — are encrypted on your device. We do not have the key and cannot read them.
- Your master password / unlock credential is never transmitted to us in any form.
- Encrypted vault backups are stored in your own Google Drive or Microsoft OneDrive account, in a private app folder only Fobb can use, not on our servers. We never see the backup contents. The sign-in tokens for Google and Microsoft stay on your device and are never sent to us.
- Fobb never receives your face or fingerprint data. Face ID, Touch ID and fingerprint unlock are handled by your phone's operating system, which only tells Fobb whether the check succeeded.
What we ask for when you create a vault
When you create a vault in the Fobb phone app, we ask for your email address (and, optionally, your name) and send a 6-digit verification code to that email to confirm it is yours. The email is required to set up an account. We use it to verify your account, to recover your subscription on a new phone, to link your devices, to send you important service messages (for example about your subscription or changes to this policy) and — only if you agree — product news. A computer or second phone you pair as a companion device does not ask for an email of its own; it is linked to the owner's account.
What our account server stores
We operate a small account server. It stores only:
- Your email address and an optional display name.
- A public key for each device you link to your account (used to verify that requests really come from your device — the matching private key never leaves the device).
- Subscription/entitlement status and the billing identifiers needed to manage it: a Stripe customer/subscription id, a Google Play purchase token, or an Apple transaction id, together with the product id, depending on which store you subscribed through.
- The end date of any free period of Fobb Pro that a promotion has given you, if any.
- Your answers to the optional satisfaction survey, if you choose to answer it (see below).
A push-notification token for your phone, together with the random ID of the pairing it belongs to, is stored on our server so that we can alert your phone when a companion device asks for a login. It is kept for up to 7 days after your phone last opened Fobb, and it is deleted when you remove the pairing or delete your account.
We never store vault data, passwords, or two-factor secrets on this server.
Satisfaction survey (optional)
Every few months the Fobb phone app may ask how likely you are to recommend Fobb (0 to 10), followed by one multiple-choice question about what you like or what would make Fobb better. Answering is up to you: "Not now" sends nothing. If you answer, we store your score, the options you picked, whether you use an iPhone or Android phone, and the app version, linked to your Fobb account — so we can see what to improve and, if your answer points to a problem, contact you about it. The survey has no text field and never includes anything from your vault. You can turn these questions off in Settings → Ask me for feedback. Your answers are kept while your account exists and are deleted with it.
Cross-device requests (relay) and Clipboard Sync
When you approve a password request from another one of your devices, or use Clipboard Sync (including text you send with Share → Fobb or Select text → Fobb), the content is end-to-end encrypted on your device before it ever reaches our relay server. The server only stores and forwards ciphertext it cannot decrypt, and deletes it once delivered or after a short timeout (Clipboard Sync items expire after 60 seconds).
Desktop companion (Windows and Mac)
The Fobb desktop app asks your phone for logins; no vault is stored on the computer. When you press the hotkey, it reads the name of the app you are in and, in supported browsers, the address of the current tab, so it can ask your phone for the right login. On a Mac this happens only after you allow Fobb to control that browser. This information is used only to build the request, which is end-to-end encrypted to your phone. It is not stored, and it is never sent to us in readable form. The desktop app keeps its device key and pairing details in your computer's secure store (Windows Credential Manager or the macOS Keychain).
Autofill on Android
Fobb can fill your logins into other apps and websites through Android's Autofill service and Credential Manager, which you turn on yourself in Android Settings. When you tap a login field, Android gives Fobb the structure of that screen — which fields are a username or password, and the website's domain — so Fobb can suggest matching entries. This is processed on your device only, is used only to find and fill the right login, and is never sent to us or to anyone else. Fobb asks for your fingerprint or face unlock before it fills anything, and you choose which entry to use.
Fobb accessibility service (optional)
Some browsers do not reliably show autofill suggestions from every password manager. So that the "Fill with Fobb" button appears reliably, Fobb offers an optional Android Accessibility Service. It is off by default. Fobb first explains in the app exactly what it does and asks you to agree; you then turn it on yourself in Android Settings → Accessibility. If it is turned on there without agreeing in Fobb, it stays inactive and Fobb asks you the next time you open it. You can turn it off at any time.
What it is used for. Only to (1) notice when you tap a username or password field in a supported browser, (2) show the "Fill with Fobb" button beside that field, and (3) type the login you choose into the field. Nothing else. The supported browsers are currently Microsoft Edge and DuckDuckGo; Android sends the service no events from any other app.
What it reads. Whether the field you tapped is a text or password field; the short text immediately before it (its label, such as "Username" or "Email"), to tell username fields from other fields; and, only at the moment you tap the button, the website address shown in the browser's address bar, so Fobb can suggest the matching entry. After filling, it checks how many characters the field now holds — never what they are.
What it never does. It does not read what you type or the contents of any field. Beyond the field labels described above, it does not read page content, messages, or anything else on your screen. It does not record your screen or activity. It does not store what it sees, and it does not send it to us or to anyone else — everything happens on your device, and none of it is used for advertising or analytics.
If a website's field refuses typed text, Fobb can instead copy that one value to your clipboard with a reminder to paste it. It is marked as sensitive and cleared after 30 seconds.
Autofill on iPhone
On iPhone, Fobb fills your logins through iOS AutoFill, which you turn on yourself in Settings. When you tap a login field, iOS tells Fobb the website's domain so Fobb can suggest matching entries. This is processed on your device only, is used only to find and fill the right login, and is never sent to us or to anyone else. Fobb asks for Face ID, Touch ID or your passcode before it fills anything, and you choose which entry to use.
Server logs and your IP address
Our server keeps operational logs for troubleshooting and security. They record the time and type of an event and an internal account identifier. They do not record your email address, your IP address, or any vault content, and they are rotated and deleted automatically. As with any internet service, our server sees your IP address when you connect; it is used only to answer the request and, briefly in memory, to limit abuse.
No advertising, analytics or selling of data
We do not sell or share your personal information, and the Fobb apps contain no advertising, analytics, or crash-reporting tools. The only feedback we collect is the optional satisfaction survey described above, and only when you answer it.
Our website
Our website, fobbsecurity.com, uses Google Analytics to understand how many people visit and which pages they read. Google Analytics sets two cookies (_ga and _ga_GTXXLVWKKG, kept for up to 2 years) and collects information such as the pages you view, how you arrived at the site, your browser and device type, and your approximate location, which Google works out from your IP address. We use this only as overall statistics to improve the site. We don't use it for advertising and don't connect it to your Fobb account. This applies only to the website; the Fobb apps contain no analytics. You can block it with your browser's cookie settings or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
Third-party services we use
- Stripe — processes card payments, only for subscriptions bought outside an app store. We never see or store your card number; Stripe returns only a customer/subscription id.
- Google Play Billing and Apple In-App Purchase — Google and Apple process subscriptions purchased through the Play Store or the App Store. We receive only a purchase token or signed receipt (a transaction id, the product, dates and status) — never your payment details.
- Firebase Cloud Messaging and Apple Push Notification service — deliver push notifications (for example "a device is requesting a password") to your phone. A notification carries no vault content.
- Google Drive (Google Sign-In) — used only if you choose to back up your encrypted vault to Google Drive. Fobb's access is limited to its own private app data folder, and the sign-in stays on your device.
- Microsoft OneDrive (Microsoft sign-in) — used only if you choose to back up your encrypted vault to OneDrive. Fobb asks for access to its own app folder, your name and email so it can show which account is connected, and offline access so you stay signed in. The backup is encrypted before it is uploaded, and the sign-in stays on your device.
- Resend — sends the email verification codes used to confirm you own an email address, and our service messages.
Data retention and deletion
We keep account data for as long as your account is active. You can delete your account at any time, directly in the app (Settings → Fobb account → Delete account) or on our account deletion page. Deleting removes your email, name, device keys, billing identifiers and any survey answers from our server immediately. If you cannot open the app, contact us at the address below and we will delete it within 30 days and confirm once it's done. Deleting your account does not cancel a Google Play or App Store subscription — cancel it in Google Play, or on iPhone in Settings → your name → Subscriptions — and does not affect your vault or backups, which we never hold. Deleting the app from your device also permanently removes your local vault and device identity; if it was never backed up, that vault data cannot be recovered by us or anyone else.
Your choices and rights
You can ask us to show you, correct or delete the personal information we hold about you — your email, name, account details and survey answers — at any time, by deleting your account in the app or by writing to the address below. You can withdraw consent to product news at any time. We will respond within 30 days. Your vault contents are not something we can show you or recover, because we cannot read them.
Children's privacy
Fobb Security is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date above.
Contact
Questions about this policy or a data deletion request: privacy@fobbsecurity.com