Authenticator. Privacy policy

This Privacy Policy explains how Authenticator handles information when you download, install, access, or use the application on an iPhone, iPad, or Mac. It describes the information that the App may process, the reasons for processing it, the way Authenticator stores certain information on your device, and the privacy rights that may apply to you based on where you live.

In this Privacy Policy, “Authenticator” and the “App” mean the iOS, iPadOS, and macOS versions of Authenticator, including related updates, improvements, and features. “We,” “us,” and “our” mean the provider of Authenticator. “You” and “your” mean the person who downloads, installs, accesses, or uses the App.

Please read this Privacy Policy before using Authenticator. By downloading, installing, accessing, or using the App, you confirm that you have read and understood this Privacy Policy. If you do not agree with the practices described here, stop using Authenticator and remove it from your devices.

1. APPLICATION AND POLICY COVERAGE

This Privacy Policy applies to Authenticator across its iOS, iPadOS, and macOS versions. It also applies to App updates, technical improvements, subscription functions, security features, support communications, and other functionality that we make available as part of Authenticator.

The Policy explains our practices concerning technical analytics, crash reports, device permissions, information stored on your device, App Store purchase status, refund verification, support requests, and limited information that trusted service providers may process for us.

This Privacy Policy does not govern the independent activities of Apple or another third party that operates under its own terms and privacy policy. For example, Apple controls the App Store, Apple ID, payment processing, subscription management, and many device-level privacy settings. You should review the privacy terms of a third-party service before using that service in connection with Authenticator.

2. CATEGORIES OF INFORMATION THE APP MAY PROCESS

Authenticator may process several limited categories of information. The categories available in a particular situation depend on the features you use, the permissions you grant, your device configuration, the operating system, and the third-party services enabled in the App.

TECHNICAL AND DEVICE INFORMATION

When you use Authenticator, the App or its integrated service providers may process technical information such as:

• device type and device model;

• operating-system name and version;

• Authenticator version, installation status, and general technical configuration;

• anonymous or pseudonymous identifiers made available by the operating system or an integrated software development kit;

• crash logs, error reports, diagnostic records, and performance measurements;

• session activity and high-level interaction with broad categories of App features.

We use this information to understand how Authenticator performs, locate technical failures, investigate crashes, improve stability, maintain compatibility, protect the App, and improve the user experience.

INFORMATION CONNECTED WITH APP STORE PURCHASES

Apple or App Store mechanisms may provide limited purchase-related information, including whether a subscription is active, whether a transaction succeeded or remains pending, and whether Authenticator should enable premium access. We do not receive or store your complete payment-card number through the App.

INFORMATION YOU CHOOSE TO SHARE

You may provide personal information when you contact us, request support, report a problem, send feedback, or exercise a privacy right. Section 8 explains this category in more detail.

3. INFORMATION KEPT ON YOUR DEVICE

Authenticator stores information locally when local storage is necessary to provide the features that you choose to use. Depending on your use of the App, locally stored information may include:

• authentication configuration and data required to generate one-time passwords;

• passwords and related account information that you save in the App;

• folders, labels, interface preferences, and App settings;

• security options, auto-lock preferences, and similar configuration;

• reminder-related settings, if Authenticator offers and you use such features;

• backup or export data that you choose to create.

Authenticator may protect sensitive local information with Apple Keychain, encryption, or another secure mechanism that Apple’s operating systems provide. The exact protection available can depend on your device, passcode configuration, operating-system version, and Apple security settings.

Information kept locally generally remains on your device. We do not transmit that information to our servers unless you choose an action that requires transmission, such as sending material in a support email, sharing or exporting a backup, or using a feature that identifies a need to communicate with an external service.

You control your device and any exported files. If you delete the App, reset your device, lose access to the device, remove local data, or fail to preserve an appropriate backup, you may lose information stored through Authenticator. You should protect exported files and recovery information with the same care that you apply to passwords and authentication secrets.

4. CAMERA, FILE, PHOTO, AND KEYCHAIN ACCESS

Authenticator may request access to device features when you choose a function that needs them. You can review or change many permissions in the privacy or security settings on your Apple device. Refusing or disabling a permission may prevent the related feature from working.

CAMERA ACCESS

The App may request camera permission so that you can scan QR codes used to configure one-time password authentication entries. Authenticator uses camera access for QR-code scanning. We do not use the camera for unrelated monitoring, advertising, or background surveillance.

We do not upload or retain camera images on our systems as part of ordinary QR-code scanning. Your device and operating system may process temporary camera data as part of their normal operation. If you start a separate sharing or support action, the information involved in that action will depend on what you choose to send.

PHOTOS AND FILES

Authenticator may let you select an image or file that contains a QR code. When you choose this function, the operating system may ask you to grant access to the selected photo or file. The App uses the selected material to locate and process the QR code. We do not use access to your photo library or files for unrelated advertising or tracking.

APPLE KEYCHAIN AND SECURE STORAGE

The App may use Apple Keychain or comparable protected storage supplied by the operating system. Authenticator uses these mechanisms to store encryption material, authentication-related information, and other security-sensitive data needed for the App’s intended operation.

We do not use Keychain access for advertising, behavioral profiling, or unrelated tracking. Keychain and device security remain subject to Apple’s platform behavior and the security choices you make, including your device passcode, biometric settings, Apple account protection, and control of the device.

5. ANALYTICS, PERFORMANCE MEASUREMENT, AND CRASH REPORTING

Authenticator may use trusted third-party tools to measure general feature usage and identify technical problems. These tools may include:

• Firebase Analytics, which may process aggregate or pseudonymous information about sessions and interaction with broad feature categories;

• Firebase Crashlytics, which may process crash reports, diagnostic details, device information, App version information, and performance-related data needed to investigate failures.

We use analytics and crash-reporting information to maintain Authenticator, diagnose errors, measure reliability, understand whether features function as expected, improve performance, and make the interface easier to use. We do not use these tools to read the authentication secrets or passwords that you store in the App.

Analytics events should contain fixed categories and technical values instead of sensitive user-entered content. We do not intend to send passwords, one-time password values, authentication secret keys, account names, folder names, recovery values, or website addresses as analytics-event content.

Firebase and other providers process information under their own privacy terms, retention practices, security measures, and legal obligations. Their processing may take place on infrastructure that they control. We select these tools for product operation, diagnostics, and improvement rather than for unrelated advertising by us.

6. PREMIUM ACCESS, SUBSCRIPTIONS, AND PAYMENT STATUS

Authenticator may offer premium features through a subscription, a one-time purchase, or another App Store purchase. Apple processes each payment through the App Store and the payment method connected to your Apple account.

We do not directly collect, process, or store your complete credit-card or debit-card details. Apple controls payment authorization, billing, renewal, cancellation, tax handling where applicable, and App Store refund procedures.

Apple or the App Store may provide Authenticator with limited transaction and entitlement information. This information may indicate whether a subscription is active, whether a purchase succeeded, whether a transaction remains pending, or whether the App should unlock or continue premium access. We use this limited information to provide purchased features, restore entitlements, address purchase problems, and maintain subscription access.

Apple’s policies govern billing, automatic renewal, cancellation, and refunds. You can manage or cancel an active subscription through your Apple account or App Store subscription settings. Removing Authenticator from a device does not cancel a subscription.

7. INFORMATION USED FOR REFUND REVIEW

If you request an App Store refund, Apple may ask for limited information to validate the request, verify entitlement, or prevent fraud. Where Apple makes such information available or requests it, and where applicable law permits, we may share anonymized or non-directly identifying indicators relevant to the refund review.

These indicators may include broad feature interaction, approximate usage patterns, transaction status, or similar technical information connected with the purchased functionality. We limit this use to refund validation, entitlement verification, and fraud prevention.

We do not provide refund-review information to Apple for our own advertising purposes. Apple decides how to process and resolve refund requests under its rules, legal duties, and privacy practices.

8. SUPPORT MESSAGES AND INFORMATION YOU SEND TO US

You may choose to contact us by email to request help, report a bug, submit feedback, make a legal or privacy request, or ask a question about Authenticator. When you contact us, we may receive:

• your email address and any name connected with the email account;

• the subject and contents of your message;

• screenshots, files, descriptions, or other material you attach;

• device, App, or diagnostic information that you choose to include;

• additional information needed to understand and answer your request.

We use this information to communicate with you, investigate the reported issue, provide support, respond to a privacy request, comply with legal obligations, prevent abuse, and improve Authenticator.

Please do not include passwords, one-time passwords, secret keys, recovery codes, or other authentication secrets in a support message. If you choose to send sensitive information, email and other communication systems may not provide the same protection as local secure storage on your device.

9. IDENTIFIERS, TRACKING TECHNOLOGIES, AND DEVICE CONTROLS

Authenticator does not use traditional browser cookies because it operates as an application rather than a conventional website. Integrated SDKs and operating-system frameworks may still process pseudonymous identifiers, device-level identifiers, diagnostic identifiers, or similar technical signals.

Such signals may support analytics, crash investigation, fraud prevention, performance measurement, entitlement verification, and feature reliability. We use them for operational and diagnostic purposes rather than for unrelated advertising by us.

Apple provides privacy controls that may affect permissions, identifier availability, analytics, diagnostics, photos, files, and camera access. The controls available to you depend on your device and operating-system version. You can review relevant permissions in your device settings and may withdraw a permission where the operating system allows it.

10. EXTERNAL LINKS AND INDEPENDENT SERVICES

Authenticator may include links to external websites, legal pages, support resources, Apple services, or third-party documentation. Some App features may also depend on infrastructure or software supplied by service providers.

We do not control the privacy, security, availability, or content practices of an independent third-party service. A link from Authenticator does not make us responsible for the external service’s handling of information.

Before submitting information to an external service, review that service’s privacy policy and terms. Your interaction with Apple, Firebase, or another provider may create a separate relationship between you and that provider.

11. PROCESSING INFORMATION ACROSS NATIONAL BORDERS

Providers that support analytics, diagnostics, crash reporting, App Store transactions, or technical infrastructure may process limited information on servers outside your country, state, province, or region.

When international processing occurs, the provider may store or handle information in a jurisdiction whose privacy rules differ from those in your place of residence. The relevant provider applies its own contractual, organizational, and technical safeguards to that processing.

We use international processing only where the supporting service requires it and where applicable law allows it. Depending on the legal framework involved, safeguards may include contractual protections, access controls, security procedures, and transfer mechanisms recognized by privacy law.

12. HOW LONG WE KEEP INFORMATION

We retain technical, analytics, and diagnostic information only for the period reasonably needed to fulfill the purposes described in this Privacy Policy. Those purposes include maintaining the App, analyzing reliability, investigating crashes, resolving technical issues, monitoring security, preventing abuse, and improving Authenticator.

Retention periods may differ by information type, legal requirement, and service provider. Third-party providers may maintain their own retention schedules for information processed through their systems.

We may keep support emails and related correspondence for the time needed to answer your request, resolve a dispute or technical problem, document the support interaction, comply with law, protect legal rights, or prevent repeated abuse. When we no longer need the information, we may delete it, anonymize it, or preserve only aggregated information that no longer identifies an individual.

Information stored locally through Authenticator remains subject to your device, operating-system behavior, deletion choices, backup configuration, and any export that you create.

13. HOW WE PROTECT INFORMATION

We use commercially reasonable technical and organizational measures designed to protect information associated with Authenticator. Depending on the information and context, these measures may include secure-development practices, access restrictions, encryption or protected storage, secure transmission methods, software updates, and Apple platform protections.

Authenticator may rely on Apple Keychain and other system-level security features to protect sensitive information on your device. Third-party providers maintain their own measures for information processed on their systems.

No application, storage method, network, operating system, or electronic transmission method can guarantee complete security. Device compromise, malware, weak passcodes, unauthorized physical access, software defects, service-provider incidents, and user error can affect security. We take reasonable steps to reduce risk but cannot promise absolute protection in every circumstance.

You can help protect locally stored information by using a strong device passcode, enabling appropriate biometric and App Lock options, installing operating-system and App updates, controlling access to your Apple account, and protecting exported backups.

14. PRIVACY OF CHILDREN

Authenticator is not intended for children under four (4) years of age. We do not knowingly collect personal information directly from children below that age.

If local law treats a user as a minor, a parent or legal guardian should supervise use of the App and provide consent where the law requires it. Parents and guardians should consider the sensitivity of authentication and password information before allowing a child to manage such information.

Contact us if you believe a child supplied personal information to us in connection with Authenticator. If we learn that we collected information in a manner that conflicts with applicable law, we will investigate and take appropriate action, which may include deleting the information.

15. PRIVACY CHOICES AND LEGAL RIGHTS

Your country, state, province, or region may grant you privacy rights under laws such as the General Data Protection Regulation, the California Consumer Privacy Act as amended by the California Privacy Rights Act, or similar legislation.

Subject to the requirements, exceptions, and limits of applicable law, your rights may include the ability to:

• ask whether we process personal information relating to you;

• request access to eligible personal information;

• request correction of inaccurate or incomplete information;

• request deletion where the law provides that right;

• request restriction of certain processing activities;

• object to processing in circumstances recognized by law;

• request an eligible copy of information in a portable format;

• withdraw consent for processing based on consent, without affecting processing that occurred before withdrawal;

• submit a complaint to an appropriate data-protection authority.

Authenticator generally does not collect direct personal identifiers by default. As a result, we may not be able to connect a particular analytics or diagnostic record with you. Privacy law may limit the steps that we can or should take to identify data when we do not already maintain a way to associate it with an individual.

To submit a privacy request, use the contact information at the end of this Policy. We may ask for information needed to understand the request, verify that it concerns you, and comply with applicable law. We will review and respond to valid requests within the period required by the relevant law.

16. ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

California residents may have rights concerning categories of personal information collected, sources of information, purposes for processing, categories of recipients, access, correction, deletion, and certain forms of sale or sharing under California privacy law.

We do not sell personal information for money. We also do not use the sensitive authentication content stored in Authenticator for cross-context behavioral advertising. Integrated analytics and diagnostic services may process technical information as described in this Policy.

We will not discriminate against you because you exercised a privacy right protected by applicable California law. Exercising a right will not result in unlawful denial of service, a different price, or a lower quality of service. Differences that California law permits, including differences connected with a paid subscription, remain allowed.

The ability to fulfill a request depends on whether we hold information that we can reasonably associate with you. Locally stored App content that we do not possess may need to be managed through your device or within Authenticator.

17. UPDATES TO THIS PRIVACY POLICY

We may revise this Privacy Policy to reflect changes in Authenticator, operating-system features, third-party integrations, legal requirements, security practices, or the way we handle information.

When a change is material, we may provide notice in the App or through another appropriate method where the law requires notice. The updated Policy will apply from its stated effective date or from the date on which we make it available if no separate date appears.

Review this Privacy Policy from time to time so that you understand the current practices. To the extent permitted by law, your continued use of Authenticator after an updated Policy takes effect confirms that you have received and acknowledged the revised Policy. If you disagree with the revised practices, stop using the App.

18. CONTACT US ABOUT PRIVACY

If you have a question, concern, complaint, support request, or privacy request concerning this Privacy Policy or Authenticator’s information practices, contact us at:

Email: aryancatar@zohomail.com