btw vault
v1.3.4APPLICATION ID: com.btwvault.app • NATIVE SQLCIPHER ENGINE
An offline-first, client-side encrypted password and secret manager powered by native SQLCipher AES-256 and Argon2id. Designed with absolute zero telemetry, no user tracking, and verifiable on-device data sovereignty.
Security Architecture & Cryptography
ZERO PLAINTEXT DISK RESIDENCYSQLCipher AES-256 Engine
The entire database is encrypted using native C++ JSI bindings to SQLCipher. Every 4096-byte database page is encrypted with AES-256 in CBC mode and authenticated via HMAC-SHA512.
• Per-page HMAC authentication
• Zero unencrypted SQLite headers
Argon2id Key Stretching
Master passwords are never stored on disk. They are stretched in volatile memory using Argon2id with memory-hard parameters configured to thwart GPU and ASIC dictionary attacks.
• 2 hashing iterations
• 256-bit cryptographically unique salt
E2EE Cloud Continuity
Optional cloud backup uses non-blocking SQLite WAL snapshots. Snapshots are encrypted client-side before transmission directly to the user's isolated Google Drive AppData directory.
• Zero intermediary relay servers
• drive.appdata scope isolation
Google Play Store Compliance & Policy Hub
VERIFIED COMPLIANTOfficial verification files, transparency disclosures, and app review guidance for Google Play auditors and end users:
Zero telemetry, zero trackers, hardware-isolated biometrics, and local wipe guarantees.
Data collection (No), Data sharing (No), Encrypted in transit (Yes), Deletion mechanism (Yes).
Step-by-step walkthrough for Google Play review team with zero credentials or gating required.
