Privacy Policy

This Privacy Policy describes how Enejoy ("we", "us", or "our") handles information in connection with the Rapto mobile application ("App") available on the Google Play Store and Apple App Store.

Rapto is a random password generator. Its sole purpose is to help you generate strong, unpredictable passwords and optionally save them to a local vault on your own device. The App is designed to function without any internet connectivity and without collecting, transmitting, or storing any information about you on external servers.

By using the App you agree to the practices described in this policy. Because we collect no personal data, there is very little to disclose — but we believe in being explicit and transparent regardless.

Rapto collects no personal information. The table below is a complete inventory of every category of data the App interacts with:

Because we collect no personal data, there is nothing for us to use, sell, share, or process. The only data that exists in the context of using Rapto is:

On your device: Your saved passwords and generator preferences are stored in your device's local application storage using AsyncStorage. This data is used solely to restore your vault and settings when you reopen the App. It is never read by us or by any third party.

In memory only: Generated passwords that you do not save exist only in your device's RAM during your current session and are discarded when you navigate away or close the App.

We do not use any data for advertising, profiling, personalisation, machine learning training, or any purpose beyond making the App work correctly for you.

All data created by Rapto is stored exclusively on your device using the platform's standard application sandbox. On Android this is the app's private internal storage directory, which is not accessible to other applications. On iOS this is the app's sandboxed container.

Because no data is transmitted to any server, there is no risk of your passwords being exposed through a network breach or server-side vulnerability. The security of your locally stored data is governed by your device's own security features — screen lock, biometric authentication, and device encryption.

We strongly recommend enabling device-level encryption (enabled by default on modern Android and iOS devices) and using a secure screen lock to protect the data in your App vault.

If your device is lost, stolen, or reset, the data in your Rapto vault cannot be recovered by us, as we do not have access to it or a backup of it anywhere.

Rapto requests the absolute minimum permissions required for it to function. Below is a complete list of every permission declared in the application manifest:

The absence of the INTERNET permission means the App is physically incapable of making any network request — not merely restrained by policy, but architecturally prevented at the operating system level.

Rapto does not integrate with any third-party services, platforms, or SDKs that collect or process personal data. Specifically, Rapto does not use:

Analytics: No Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or any equivalent service.
Advertising: No Google AdMob, Meta Audience Network, or any advertising network of any kind. The App contains no advertisements and never will.
Crash reporting: No Crashlytics, Sentry, Bugsnag, or equivalent service.
Cloud storage: No Firebase, AWS, or any cloud database.
Authentication: No Google Sign-In, Apple Sign-In, Facebook Login, or any authentication service.
Payments: The App is free and contains no in-app purchases or payment processing.

The App is distributed through the Google Play Store and Apple App Store. Those platforms operate under their own privacy policies and may collect aggregate distribution statistics (number of installs, crash reports submitted by the OS) independent of our App. We do not receive personally identifiable information from these platforms.

Rapto is a general-purpose security utility suitable for users of all ages. The App does not collect any personal information from any user, including children under the age of 13 (as defined by COPPA in the United States) or under the age of 16 (as defined by GDPR in the European Union).

Because no personal data of any kind is collected from any user, the App is inherently compliant with COPPA, GDPR-K, and equivalent children's privacy regulations in all jurisdictions. There is no data to collect, share, or delete regardless of the user's age.

Depending on your location, you may have rights under applicable privacy law including the right to access, correct, or delete personal data held about you, and the right to object to or restrict certain processing activities.

Because Rapto collects and holds no personal data about you on any server or database we control, these rights have no practical exercise in the context of our App — there is nothing for us to access, correct, or delete on our end. All data associated with your use of the App exists solely on your own device and is entirely under your control.

If you wish to exercise rights over data your device's operating system or the app stores may hold, please consult Google's or Apple's respective privacy controls and policies.

You have full control over all data stored by Rapto on your device. You can delete your data at any time using any of these methods:

Within the App: Navigate to the Vault screen and use "Clear All" to delete all saved passwords. Your generator preferences can be reset by clearing app data through your device settings.

Uninstall the App: Uninstalling Rapto from your device deletes all locally stored passwords and preferences permanently. Because we hold no copy of this data, deletion is immediate and irreversible.

Device Settings: On Android, you can clear app data via Settings → Apps → Rapto → Storage → Clear Data. This removes all locally stored vault contents and preferences.

As we hold no data about you on any server, there is no additional deletion request to submit to us. Uninstalling the App or clearing its data is all that is required for complete deletion.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where required by applicable law, notify users through the App or app store update notes.

Any changes we make to this policy will be posted at this URL (https://rapto.app/policy) and will take effect from the date indicated. Continued use of the App after any changes constitutes your acceptance of the updated policy.

Because our data practices are minimal by design, any changes are likely to expand your rights or further restrict what we do, rather than introduce new data collection.

If you have any questions, concerns, or requests relating to this Privacy Policy or the App's data practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.