This policy applies to Primitive Pass services that link to it, including the web vault, desktop app, browser extension and mobile applications, and related account services.
Primitive Pass is provided by PRIMITIVE AI LABS PTY LIMITED, trading as Primitive AI.
This policy applies to Primitive Pass services that link to it, including the web vault, desktop app, browser extension and mobile applications, and related account services.
We explain the security controls Primitive Pass uses without promising absolute security or claiming an independent audit.
Depending on the features a person uses, Primitive Pass may process the following categories.
We may process:
Primitive Pass does not need the master password or Recovery Key in plaintext on the server.
The service may store and synchronise encrypted records including:
The service is designed so this server-side vault material is ciphertext rather than readable vault content.
Primitive Pass may process limited technical information needed to operate and protect the service, such as:
We do not use this information for behavioural advertising.
If you turn on Rebirth Lock, Primitive Pass checks whether a website’s domain appears to have changed hands before it fills a saved login. To do this, the extension sends the website’s registered domain only (for example, example.com, never the full web address, page content or your login) to our server. Our server links the request to your signed-in account so it can apply a fair-use limit of 30 checks an hour.
Our server looks up public domain-registration records through the Registration Data Access Protocol (RDAP), using the registry responsible for that domain, which it finds through the public IANA registry list. Registries are run by organisations in many countries, including outside Australia. They receive the domain name and our server’s network address, not your identity or your IP address. Our server keeps lookup results in memory for up to 15 minutes and does not store a history of the domains you check. The result your extension saves (the domain, its registration date, registry identifier and name servers) is kept inside your encrypted vault.
Rebirth Lock is off until you turn it on, and you can turn it off at any time in the extension.
If you choose to check your saved passwords against known data breaches, your device creates a one-way fingerprint (SHA-1 hash) of each password and sends only the first five characters of that fingerprint to the Pwned Passwords service run by Have I Been Pwned. The service returns a list of matching fingerprints, and your device does the comparison itself. Your passwords, full fingerprints, email address and vault contents never leave your device for this check.
Like any website, the Pwned Passwords service receives your device’s IP address when your browser connects to it. It is delivered through Cloudflare’s global network, so requests may be processed outside Australia. The check runs only when you start it.
If you connect an AI agent or assistant to Primitive Pass, we keep the records needed to control and audit that access: the agent’s name and identifier, the app or service it connects from (including OAuth client details for remote connections), the permissions (“passport” and grants) you approve, the purpose you or the agent gives, approval and expiry times, and an audit receipt of each use. Audit receipts show which item was used, for which site and when, and whether the use succeeded. They never contain the password or other secret.
When you approve a login for an AI agent, Pass fills it in your own browser. The agent never receives your stored passwords from Pass. Once a login is filled in, it sits in the web page like a login you typed yourself, so software that can read or control that page may be able to read it. That includes an AI agent you have also given access to your browser, for example through a browser-automation or “computer use” tool. Only give an agent that kind of access if you trust it with what is on the page.
The agent provider (for example OpenAI, Anthropic or Cursor, which may be located outside Australia) receives what you and the agent exchange, under its own terms and privacy policy. This includes the details Pass gives the agent, such as your Pass account ID, email address and name (if set), the sites and purposes of its requests and whether they succeeded. You can revoke an agent’s access at any time.
The Primitive Pass Chrome extension has one purpose: to let you use credentials and passkeys from your Primitive Pass vault on websites you choose, while keeping vault contents encrypted.
Primitive Pass's use of information received through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
We use that information only to provide or improve the disclosed Primitive Pass password, passkey and secure-access features. We do not use or transfer it for personalised advertising, creditworthiness, lending decisions or unrelated data brokerage. We transfer it only when necessary to provide or improve those features, to comply with applicable law, to protect against malware, spam, phishing, fraud or abuse, or as part of a merger, acquisition or sale of assets after obtaining the user's explicit prior consent. Humans are not permitted to read Chrome extension user data except with the user's explicit consent for specific data, where necessary for security, where required by law, or where the data is aggregated and anonymised for lawful internal operations.
If you sign up, sign in, recover an account or contact us, we may process the email address and message or delivery information needed for that communication.
Authentication emails are delivered through Resend.
If a user sends vault secrets or other sensitive material to support outside the normal Primitive Pass vault flow, that information may necessarily appear in the communication received by support. Users should not send passwords, Recovery Keys or vault contents to support unless specifically required through an approved secure support process.
If you create or join a company on your Primitive account, the account service keeps the company name, each member's account ID, role and join date, invitations (the invited email address, deleted 30 days after the invitation is accepted, cancelled or expires), and a company activity record that holds IDs, not email addresses. The company's owners and admins can see members' email addresses; other members can't. A company can't see or open your personal vault. See the Primitive account privacy policy.
The Primitive Pass web app does not set cookies and uses no analytics, advertising or third-party cookies or trackers. It keeps a small amount of information in your browser’s storage:
The web app does not keep a copy of your vault in browser storage. Its service worker only lets you install the app; it does not store pages, data or secrets. You can clear this information at any time in your browser settings; you will need to sign in again. The Primitive account site uses its own sign-in cookie, described in the Primitive account privacy policy.
Paid plans, when offered, are processed by Stripe. Stripe handles card and payment details; we do not store them. If we later offer purchases inside our mobile apps, Apple (App Store) or Google (Google Play) will process those purchases under their own terms. Primitive AI keeps only the information needed to link a purchase to an account: plan, status, billing period, email address and the payment provider’s customer and subscription references.
We use personal information only for purposes reasonably connected to operating and protecting Primitive Pass, including to:
No selling. We do not sell or rent personal information.
No advertising. Primitive Pass does not show advertising, and we do not use your information for advertising or to build advertising profiles.
No AI training. We do not use your vault contents, your account information or how you use Primitive Pass to train artificial intelligence or machine-learning models, whether ours or anyone else's, and we do not let our service providers do so.
Primitive Pass is designed around the following boundary:
Primitive Pass encrypts your vault on your device before it is uploaded. Our server stores encrypted vault data and does not have the vault keys needed to read a locked vault. Sign-in uses OPAQUE, so your master password is not sent to or learned by the server.
Vault decryption occurs on an authorised client after the user unlocks the vault.
Primitive AI cannot simply reset a forgotten master password and decrypt the vault on the user's behalf. Where recovery is available, it relies on the user's Recovery Key and re-wrapping of the user's key material.
Primitive AI may use service providers to operate Primitive Pass. Providers should receive only the information reasonably required for their function.
The current launch design includes:
Some providers may process or store information outside Australia. Where applicable, Primitive AI takes reasonable steps appropriate to the service and applicable law when using overseas providers.
If you connect an AI agent, its provider receives what you and the agent exchange, as described in AI agent access. That provider is not our service provider; its own terms and privacy policy apply.
Our production server runs on our own self-hosted deployment infrastructure, on our server, hosted by Hetzner. We do not use Coolify Cloud.
Primitive Pass seeks to keep identifiable account and security information only for as long as it is reasonably needed for the purpose for which it is held, subject to security, legal and operational requirements.
The account service currently defines the following short-lived periods:
IP rate-limit records are deleted no later than 24 hours after their active rate-limit window ends.
Production logs, including security and request logs that record your IP address, the time and address of each request and your browser or app details, are kept for about 30 days and then deleted. We make an encrypted system backup once a day. Each daily run deletes backups more than 35 days old, but only after that day's new backup has been saved and checked, so each backup is normally deleted 35 to 36 days after it is made. If daily backups fail, older backups are kept until a backup succeeds again, so the last successful backup is preserved.
User-created encrypted export/backup files are controlled by the user and are not automatically removed from the user's own storage when the Primitive Pass account is deleted.
The account-deletion implementation is designed to require an authenticated session and a fresh OPAQUE proof of the account password before deletion.
When successful, the server-side deletion transaction removes the account and associated account data, including:
The deletion design retains only a SHA-256 hash of the former account identifier and the deletion timestamp as a deletion tombstone. It does not retain the deleted email address or vault data in that tombstone. We keep these deletion records for 12 months after the deletion, so that deleted sessions and codes can’t be reused and so we can show that the deletion happened, and then delete them. We keep them longer only if we need to meet a legal obligation or resolve a dispute. Deletions made through your Primitive account also keep a record that the deletion happened (the random account ID, what was deleted, when, and each app’s confirmation) so we can show it was done; it does not include your email address or vault data.
You can delete your Primitive account (and with it your Pass vault data on our servers) in any of these ways:
We do not claim an iOS in-app deletion path in this policy until that path ships in the iOS app.
Active account and vault records are deleted when account deletion succeeds. Copies that remain in system backups are deleted with those backups, normally 35 to 36 days after each backup is made (see section 7).
The mobile applications are designed to keep only a read-only encrypted offline copy of the last accepted vault sync and limited account/sync metadata required to operate the app.
The encrypted offline copy is intended to be excluded from operating-system cloud backup or device-transfer backup.
Primitive Pass does not rely on advertising SDKs or behavioural tracking SDKs in the current mobile applications.
On Android, you can delete your account from Settings → Delete account (type DELETE and confirm with your password). That removes the account on our servers (see section 8) and clears the app's local account and offline vault state for that account on the device. If you need help, email hello@primitiveai.com.au.
A user may contact hello@primitiveai.com.au to ask about personal information Primitive AI holds about them, request correction where appropriate, raise a privacy concern, or ask for assistance with deletion.
Some requests may require identity verification before information is disclosed or changed.
Where information is held only in encrypted vault form that Primitive AI cannot decrypt, our ability to provide readable vault contents is correspondingly limited. Users should use the product's export functionality while they can still unlock their vault.
If you have a question or concern about how we handle your personal information, or you think we have breached the Australian Privacy Principles, please email our privacy contact at hello@primitiveai.com.au with the subject “Privacy complaint”. Tell us what happened and how you would like it resolved. We don’t need your vault password and will never ask for it.
We will acknowledge your complaint within 7 days, investigate it, and aim to give you a written response within 30 days. If we need more time, we will tell you why and when to expect a response.
If you are not satisfied with our response, or we haven’t responded within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC). The OAIC accepts privacy complaints in writing:
For general enquiries you can phone the OAIC on 1300 363 992 (+61 2 9942 4099 from outside Australia).
Primitive Pass uses technical and organisational controls intended to reduce unauthorised access, disclosure, alteration and loss.
The product architecture includes client-side encryption, authenticated encryption, a separate account-authentication protocol, scoped network egress, session controls, rate limiting and fail-closed validation of untrusted server records.
No internet-connected service can promise absolute security. Security claims will be limited to controls and review evidence that actually exist.
Primitive AI maintains a cyber security incident and data breach response process. If an incident affects personal information, Primitive AI will assess the incident and take notification or remediation steps required by applicable law and the circumstances.
Primitive Pass is intended for adults.
You must be at least 18 years old to create a Primitive Pass account.
Primitive Pass is not intended for the Apple Kids category or the Google Play Families programme at initial launch.
Primitive AI is an Australian company and uses the Australian Privacy Principles as a responsible privacy benchmark where relevant to its activities.
Primitive Pass is initially offered for Australia. We will address applicable privacy requirements before deliberately marketing or distributing the service in other markets.
We may update this policy when Primitive Pass features, providers, data practices or legal requirements materially change.
Where a change materially affects how personal information is handled, we will update the effective date and provide notice where appropriate.
Privacy questions or requests:
These terms apply to Primitive Pass services that link to them, including the web vault, browser extension, desktop app and mobile applications.
Primitive Pass is provided by PRIMITIVE AI LABS PTY LIMITED, trading as Primitive AI.
By creating an account or using Primitive Pass, you agree to these terms. If you do not agree, do not use the service.
If you use Primitive Pass for an organisation, you confirm that you have authority to accept these terms for that organisation.
You must be at least 18 years old to create an account or use Primitive Pass.
You are responsible for keeping your account details, master password and Recovery Key safe. You are also responsible for activity through your account unless it results from our breach of these terms or a failure we are legally responsible for.
Tell us promptly at hello@primitiveai.com.au if you believe your account has been accessed without permission.
If you lose both your master password and your Recovery Key, we cannot recover your vault. By using Primitive Pass, you accept this.
Primitive Pass is in beta. Features may be incomplete, change or stop working. We may add, change or remove features as we improve the service.
We may pause all or part of the service for maintenance, security, legal or operational reasons. Where reasonable, we will give notice of a material change or interruption.
The Primitive Pass password manager is free to use, with no time limit and no trial period. We may offer optional paid extras, such as more storage or AI features. These are never required to keep using Primitive Pass, and we will show the price and billing period before you buy one.
Payments for paid extras will be processed by Stripe and may also be subject to Stripe's terms. If we later offer purchases inside our mobile apps, Apple or Google will process them, and their terms will also apply. We do not invent or charge fees that were not shown to you before purchase.
You may request a pro-rata refund within 14 days after a paid charge. The refund will cover the unused part of the relevant paid period. Contact hello@primitiveai.com.au to request it.
This refund term is in addition to your rights under the Australian Consumer Law. It does not exclude, restrict or modify any guarantee, right or remedy that cannot lawfully be excluded.
You must not:
We may suspend or close accounts that break these rules. We will give notice where reasonable.
You keep ownership of content you place in Primitive Pass.
You give us only the limited permission needed to host, process, transmit and display your content to you, and to people or services you authorise, so we can provide and operate Primitive Pass. This permission ends when the content is deleted from our active systems, subject to reasonable backup retention and legal requirements.
You are responsible for having the rights needed to place content in Primitive Pass and for using that content lawfully.
Primitive Pass may let you choose to give AI agents limited access, or to use connectors or third-party services. What they do or return may be incomplete, incorrect or unsuitable. Review it before relying on it or taking action.
Third-party services are controlled by their providers and may have separate terms and privacy practices. We are not responsible for a third-party service, except to the extent the law makes us responsible.
Our Privacy Policy explains how we handle personal information when you use Primitive Pass.
You may stop using Primitive Pass at any time and may close your account through the available account-deletion process.
We may suspend or close your account if you materially or repeatedly break these terms, create a security or legal risk, or do not pay an amount that is due. We will give notice and a reasonable opportunity to fix the issue where reasonable, but may act immediately when needed to protect users, the service or others.
When an account closes, your right to use Primitive Pass ends. Terms that are intended to continue, including ownership, disclaimers, liability limits and governing law, continue to apply.
Primitive Pass is provided on an "as available" basis. During beta, errors, interruptions and feature changes are more likely.
To the extent the law permits, we do not promise that the service will always be available, uninterrupted or error-free, or that it will meet every need. Nothing in these terms excludes any promise, guarantee or remedy that cannot lawfully be excluded.
To the extent permitted by law, our total liability arising out of or connected with Primitive Pass is limited to the total fees you paid us for Primitive Pass in the 12 months before the event giving rise to the claim. If you are on the free plan, the limit is A$100.
This limit does not apply where the law does not allow liability to be limited, including liability relating to Australian Consumer Law guarantees, fraud or gross negligence.
The Australian Consumer Law may give you guarantees, rights and remedies that cannot be excluded, restricted or modified. Those guarantees, rights and remedies always apply and are never excluded by these terms.
Any disclaimer, refund term or liability limit in these terms applies only to the extent the Australian Consumer Law permits.
These terms are governed by the laws of Western Australia. You and Primitive AI submit to the courts of Western Australia and courts that may hear appeals from them.
We may update these terms when the service, our business or legal requirements change. We will update the effective date and give reasonable notice before a material change takes effect.
If you do not agree to an updated term, you may stop using Primitive Pass and close your account before it takes effect.
Questions about these terms: