Bastique — Support & Help

Support document Support & Help

Bastique's core vault works fully offline and keeps your sensitive information encrypted locally on your device. Network access is used only when you enable optional features such as end-to-end encrypted synchronization, secure sharing, subscription verification, or breach checking. Sync and Share contents are encrypted before transmission, and the relay processes their ciphertext only. The optional macOS and Windows AI duplicate review uses Cloudflare Workers AI with minimized pseudonymized relationship metadata and never sends usernames, passwords, codes, notes, attachments, or full URLs. Android, iOS, and Linux Snap builds do not include this cloud AI feature.

Getting Started with Bastique

Create a Master Password: Your master passphrase is your primary credential for unlocking the vault. Make it strong, memorable, and never share it.
Write Down Your Recovery Key: Upon the first launch, Bastique generates a 24-character Recovery Key. Store this key in a secure offline location. It is your only way to regain access if you forget your master password.
Add Secrets: Navigate to any category and tap Add to create an entry. Detailed guides are accessible in the app under the Guide tab or in Settings → User Guide.

Frequently Asked Questions

I forgot my master password. What can I do?

Enter your 24-character Recovery Key on the unlock screen to decrypt your database and reset your master password. Because Bastique uses a zero-knowledge architecture, we do not store your credentials. If you lose both your master password and your Recovery Key, your vault cannot be recovered by anyone. This is by design.

What happens after repeated failed unlock attempts?

Bastique enforces a non-disableable limit of 12 consecutive failed unlock attempts. When this limit is reached, the local encrypted vault is automatically deleted from that device.

This safeguard is designed for situations where the device is no longer under its owner's control and repeated attempts may represent an effort to gain unauthorized access. The protection cannot be disabled or bypassed.

Only the local vault on that device is affected. Previously created encrypted backups or synchronized copies, if available, can be used to restore the vault.

How do secure E2E Sync and Sharing work?

All syncing and sharing features use end-to-end encryption. Your devices share a group key during the pairing process. When paired devices can reach each other nearby, Bastique can exchange encrypted updates locally. When they are apart, the Cloudflare Workers relay can carry encrypted snapshots that cannot be read without the required key.

Secure sharing uses the same privacy model for selected items: credentials, notes, or documents are sealed before upload, and one-time packages are deleted immediately after retrieval or expire automatically after 10 minutes.

Which Bastique features require a subscription?

The one-time purchase of Bastique includes the core offline vault, local encrypted storage, authenticator, local OCR, encrypted attachments, backup tools, local security audit features, and device-local work that does not need the relay.

A separate auto-renewable subscription enables the secure relay for remote sync, pairing support, and encrypted one-time sharing with other people. It is useful when your devices are not nearby, or when you need a private way to send documents, credentials, or protected notes without exposing readable files through email, chats, or shared folders. It also enables optional AI-assisted review of ambiguous duplicates using minimized pseudonymized metadata; deterministic duplicate detection remains local and does not require this feature.

What does AI-assisted duplicate cleanup send?

This optional feature is available only in the macOS and Windows desktop builds. After you confirm an analysis, Cloudflare Workers AI receives only public service domains or provider IDs, random identifiers created for that one analysis, and indicators or counts showing which kinds of fields are present. Bastique does not send usernames, email addresses, passwords or password hashes, TOTP secrets, recovery codes, notes, attachments, or full URLs. The model cannot access the vault or make changes itself. Bastique validates its suggestions locally and asks for confirmation before applying them. Android, iOS, and Linux Snap builds do not include the cloud AI feature.

How is the Linux Snap edition different?

The Linux Snap edition is free and keeps Bastique local-only. It includes the encrypted vault and direct synchronization or sharing when your devices can reach each other on the same local network. It does not use the Bastique relay, remote Secure Share, or store-based Sync subscriptions, and cloud AI duplicate review is unavailable. Optional breach checking remains a separate action that contacts the Have I Been Pwned k-anonymity API only when you request it.

Are my files and PDF attachments safe?

Every file you attach inside Bastique is encrypted using its own Data Encryption Key. Decrypted copies are stored temporarily only during viewing. Secure deletion of temporary decrypted files is performed on a best-effort basis: on modern storage, complete physical erasure of specific sectors cannot be guaranteed, so the primary protection remains that the stored data itself is encrypted.

How does the local Offline Document Scanner work?

The document scanner uses a private, local recognition engine. When you take a photo of a document, passport, or license card, the model runs directly on your device to extract text. No photos are uploaded to remote cloud recognition services.

Purchases, Subscriptions, and Billing

Bastique purchases and subscriptions are processed by the Apple App Store, Google Play, or Microsoft Store, depending on the platform where the purchase was made.

Subscription management and cancellation are handled through the account associated with the relevant store.
Eligible Apple, Google Play, and Microsoft builds include a 14-day Bastique Sync trial; the Linux Snap does not offer the subscription.
Deleting Bastique does not automatically cancel an active subscription.
Users may restore eligible purchases through the Restore Purchases option available in the application.
Refund eligibility and refund processing are determined by the relevant store under its policies.

Privacy and Data Deletion Requests

For privacy questions or requests concerning server-side encrypted data, contact bastique@eventumdigital.com.

Contact Customer Care

For billing, technical support, corporate licensing, or feedback, please contact us at:

Valeriia Lypovska, Individual Entrepreneur (Eventum Digital Agency)
Email: bastique@eventumdigital.com
Official Website: bastique.eventumdigital.com

End of document Your privacy. Your control.