Privacy Policy
N.O.V.A. AppHub
N.O.V.A. AppHub processes account details you provide, support messages and technical records required to secure downloads and operate software updates. Download IP addresses are stored only as one-way keyed hashes when that optional feature is enabled. Operational records are retained only as needed for security, support and service reliability. You may request access, correction or deletion through the published contact page, subject to legal and security obligations.
LOKOT Android
LOKOT Password Manager for Android is a local-first encrypted vault. It does not use N.O.V.A. servers as a cloud password vault, and its Free features do not require a N.O.V.A. account.
Data stored on the device
Vault profiles, passwords, usernames, website addresses, secure notes, software licenses, identity records, payment records, server credentials, settings and cryptographic material are stored locally in the encrypted LOKOT vault. Master-password verification, password generation and security scoring run on the device. LOKOT does not include advertising, analytics or third-party crash-reporting SDKs.
Android Autofill
When the user chooses a LOKOT Autofill suggestion, LOKOT sends the selected username and password only to the target Android app or supported HTTPS website. Website addresses are processed on the device to match credentials to the exact HTTPS origin. Autofill credentials and browsing data are not sent to N.O.V.A. servers.
Camera and local network
Camera access is requested only when the user starts QR pairing. QR frames are processed locally and are not retained or uploaded. Local-network access is used only for user-initiated pairing and synchronization with LOKOT for Windows on the user's private LAN or Wi-Fi network. Vault changes are end-to-end encrypted between the user's devices, and N.O.V.A. cannot decrypt them.
Optional license activation
If the user activates LOKOT Pro or accepts an eligible companion entitlement during pairing, the app sends the license key or single-use companion grant, a randomly generated installation identifier, a device display name derived from the Android manufacturer and model, the Android platform identifier, the app version and a cryptographic request nonce to https://license.novaapphub.net over HTTPS. The licensing service also receives request metadata such as the IP address and user agent and records security audit events. This information is used only to validate entitlements, enforce activation limits, prevent abuse and support license deactivation. It is not used for advertising, analytics or location profiling and is not sold. The complete license key is not persisted by the Android app. The returned opaque activation credentials and signed license state are encrypted inside the local vault and protected with Android Keystore.
Retention and deletion
Local vault data remains on the device until the user deletes records, clears the app's storage or uninstalls LOKOT. License activation and security records are retained only as needed to operate the entitlement, enforce activation limits, investigate abuse, meet legal obligations and provide support. Users can deactivate a device from LOKOT settings. Privacy, access, correction and deletion requests can be submitted through https://novaapphub.net/contact, subject to legal and security retention obligations.
Children
LOKOT is not designed for children and is not directed to children.
LOKOT Browser Extension
The LOKOT Browser Extension is a local companion for LOKOT Password Manager for Windows. It does not operate as a cloud password vault.
Data handled
To provide its user-facing password-management features, the extension handles the address and origin of the active HTTPS website, usernames or email addresses, passwords entered in sign-in fields, sign-in form structure and limited user actions such as submitting a sign-in form or choosing a LOKOT command. This processing is required to find credentials for the exact website, display the LOKOT fill control, fill a credential selected by the user, insert a locally generated password, and offer to save or update a sign-in after user confirmation.
The extension stores only local preferences in Chrome storage, such as whether automatic filling is enabled. It does not store usernames, passwords, encryption keys or vault contents in Chrome storage.
Local processing and disclosure
Credentials are exchanged only with the locally installed LOKOT native messaging host on the same computer and are stored in the user's encrypted local LOKOT vault. The extension does not transmit credentials, browsing activity or website content to N.O.V.A. servers or third parties. N.O.V.A. does not sell this data, use it for advertising, use it to determine creditworthiness, or permit human access to it.
Website access
Persistent access to HTTPS websites is optional and is requested only when the user enables sign-in detection or automatic filling. It is used to recognize sign-in forms, show the LOKOT icon and offer the features described above. The user can disable this access from the extension or revoke it through browser settings. The extension does not operate on non-HTTPS pages and does not automatically submit forms.
Retention and deletion
Credentials remain in the local LOKOT vault until the user edits or deletes them. Removing the browser extension removes its browser-local preferences but does not delete the separate desktop vault. Users can manage or delete vault data from LOKOT for Windows.
Security
LOKOT restricts credential matching and filling to the exact HTTPS website origin and requires an available, unlocked local vault. Generated passwords are created locally. The extension packages all executable code with the extension and does not execute remotely hosted code.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data handled by the extension is used only to provide or improve the extension's disclosed single purpose.
Contact
Privacy, access, correction and deletion requests can be submitted through https://novaapphub.net/contact.