"May be able" refers to collect, which is entirely up to the app. It does have access to password as you write them with it. It doesn't know what you're writing and it MAY collect. But it's not clear if it does collect.