Legal
Privacy Policy
Effective date: 11 September 2026
Authenticator App - 2FA (“we”, “our”, or “us”) respects your privacy. This policy explains what information the app handles, how it is used, and what stays on your device.
By installing or using the app you agree to the practices described here. If you do not agree with this policy, please discontinue use of the app.
1. Information we collect
1.1 Personal information
The app is designed to work without personally identifying information. We do not ask for your name, email address, phone number, or contacts, and there is no account to create. You can use the app without submitting any personal data to us.
1.2 Authentication data
The app generates time-based one-time passwords (TOTP) for two-factor authentication. The setup keys behind those codes, and the codes derived from them, are stored on your device.
We do not collect, access, or store your setup keys or generated codes on our servers, unless you explicitly enable the optional backup feature in the app.
You are responsible for keeping your device secure and for keeping the recovery codes each service provides when you enable two-factor authentication.
1.3 Non-personal information
To keep the app stable we may automatically collect limited technical information that does not identify you, such as:
- Device model and manufacturer
- Operating system version
- Crash reports and diagnostic information
- General region or country (not precise location)
2. How we use information
The information described above may be used to:
- Operate and improve the app
- Identify and fix crashes and technical faults
- Understand general usage trends
- Prevent misuse or unauthorised activity
We do not sell your personal information.
3. Permissions the app requests
Each permission is requested in context and used for a single purpose:
- Camera — requested only when you add an account, so the app can scan the QR code a service shows you. No photo or video is recorded, stored, or uploaded.
- Fingerprint and face unlock — handled entirely by your device's biometric system. The app receives only a pass or fail result; your biometric data never reaches us.
- Storage — used only if you enable encrypted backup, so the app can write and restore the backup file.
- Network access — used for crash diagnostics and, if you enable it, backup. Generating a code never requires a connection.
4. Advertising
Authenticator App - 2FA does not display advertising. We do not bundle an advertising network, we do not collect the advertising identifier from your device, and we do not build advertising profiles about you.
5. Analytics
We do not use third-party analytics services to track your behaviour in the app. The limited technical and crash information described in section 1.3 is used only to identify and fix faults, and it is not combined with any information that identifies you.
6. Data security
We use reasonable technical and organisational measures to protect information against unauthorised access, alteration, or loss. Your setup keys remain on your device unless you enable backup. No system can be guaranteed completely secure.
7. Children's privacy
The app is not directed at children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we will take steps to delete it.
8. Location
The app does not collect precise location. Where regional information is used, it is the general country or region reported by the device, and it is not used to track individuals.
9. Legal disclosure
We may disclose information where required by law or legal process, or where necessary to protect the rights, safety, or integrity of the app and its users.
10. Changes to this policy
We may update this policy from time to time. Changes are reflected by updating the effective date above. Continued use of the app after an update indicates acceptance of the revised policy.