Privacy Policy

Last updated: October 3, 2026

Lacre is a password manager and secure vault for iPhone and iPad, made by SESIN IT SERVICES IGT LLC (United States). This page explains what happens with your information. The short version: we don't collect any of it.

We don't collect your data

Lacre has no accounts, no analytics, no advertising, no tracking and no third-party code. We don't run any server that receives your vault. We can't see your passwords, cards, documents or notes, and we couldn't hand them over to anyone, even if asked.

Encryption on your device

Everything you save is encrypted on your iPhone or iPad before it is stored, with AES-256-GCM. The key comes from your master password (strengthened with PBKDF2, at least 650,000 iterations) combined with a 128-bit Secret Key created on your device.

Your master password is not stored anywhere. Your Secret Key stays in this device's Keychain and in the Emergency Kit you save or print; it doesn't sync. If you forget your master password, nobody — not even us — can recover your vault.

iCloud backup and sync

If iCloud is available, Lacre keeps a copy of your vault in your private iCloud database (CloudKit), already encrypted. Apple stores those encrypted blocks for you; neither Apple nor we can read them. You can turn off iCloud for Lacre in your device's Settings at any time.

Face ID

Face ID is handled by iOS. Lacre never receives your face data: it only gets a yes or a no from the system, which unlocks a key kept in your device's Secure Enclave.

Voice dictation

Dictation uses only the speech recognition that runs on your device. The first time you dictate in a language your device doesn't have yet, it downloads that language's recognition model from Apple, once; nothing you say is sent. If that isn't possible, Lacre doesn't dictate and you can type instead. What you say is turned into items on your device, with rules and, if your device has it, the on-device model of Apple Intelligence. Audio is not stored, and nothing you dictate is sent to us or to anyone else.

Camera and photos

The camera is used only when you scan a card, a document or a QR code, and the recognition happens on the device. A photo or a scan is stored, encrypted, in your vault only if you save it.

AutoFill

The Lacre AutoFill extension reads your vault on the device to fill passwords, codes and passkeys, and only after Face ID or your master password. Passwords you save from Safari are sealed into an encrypted inbox that only the Lacre app can open.

Breached password check (optional, off by default)

If you turn on “Check for breached passwords”, Lacre asks the Have I Been Pwned “Pwned Passwords” service whether your passwords appear in known data breaches. For each password it sends only the first 5 characters of its SHA-1 hash (a technique called k-anonymity) — never the password or its full hash. The service answers with a list of possible matches and the comparison happens on your device. This is the only connection Lacre makes outside iCloud, and you can turn it off at any time in Settings.

Sharing an item

When you share an item, Lacre creates an encrypted .lacre file protected by a passphrase. You choose how to send it (Messages, Mail, AirDrop…); it never goes through us.

Exports

You can make an encrypted backup, or export your passwords as a CSV file. A CSV file is not encrypted: anyone who gets it can read it. Lacre asks for your master password and warns you before creating one.

Notifications

Reminders about expiring documents and cards are scheduled on your device. No notification goes through a server.

This website

lacre.sesinit.com is a set of static pages delivered through Cloudflare. Our server keeps no visit logs and sets no cookies. Cloudflare processes technical data, such as your IP address, to deliver the pages, under its own privacy policy.

Children

Lacre doesn't collect data from anyone, children included.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

SESIN IT SERVICES IGT LLC — [email protected]