LeakGuard is built on a single principle: your secrets never leave your device. This Privacy Policy explains what data the App does and does not collect, and why.
LeakGuard is operated by an independent developer. By using the App you agree to this policy.
We never collect, transmit, or store your passwords — not even in hashed or encrypted form on our servers, because we have no servers.
We do not require you to create an account. We do not collect your name, device identifier, location, contacts, or any other personal information during normal app use.
When you check a password, the following happens entirely on your device:
① Your password is hashed with SHA-1 using Apple's CryptoKit framework. ② Only the first 5 characters of that hash are sent to the Pwned Passwords API (api.pwnedpasswords.com), operated by Troy Hunt. ③ The API returns a list of hash suffixes that start with those 5 characters. ④ Your device checks whether your full hash suffix is in that list. ⑤ The result is shown to you.
Your actual password is never transmitted. The first 5 hash characters sent cannot be used to recover your password or identify you. This model — called k-anonymity — is the same one used by Apple's built-in Password Monitor.
The Pwned Passwords API is subject to Troy Hunt's privacy policy at haveibeenpwned.com/Privacy.
The App stores the following data locally using SwiftData. This data never leaves your device and is never accessible to us:
You can delete all local data at any time by deleting the App from your device.
Optional Pro upgrades are processed entirely by Apple through the App Store using StoreKit 2. We do not receive, process, or store your payment information.
Apple's Privacy Policy (apple.com/privacy) governs all purchase transactions.
We use TelemetryDeck (telemetrydeck.com) to collect anonymous, aggregated signals — for example, which screens are used most or whether a check completed successfully.