Overview
This Privacy Policy explains how Authenticator 2FA MFA ("Authenticator 2FA MFA", "we", "us") handles information in connection with the Authenticator app (the "App"). Authenticator 2FA MFA builds the App to be private by design: your two-factor accounts and codes are generated and stored on your device, we do not require an account, and we do not operate servers that hold your secrets.
We may update this policy from time to time. If we make changes we will revise the date above and, where appropriate, provide additional notice.
Information we collect
The App works fully offline and does not require you to sign up. We do not collect your authenticator accounts, secret keys, generated codes, name, email address, or contacts. Specifically:
•
Account secrets and codes: created and stored only on your device, in the iOS keychain and the App’s encrypted local storage. They never leave your device unless you explicitly create a backup.
•
No analytics or advertising SDKs: the App contains no third-party tracking, advertising, or behavioral-profiling tools.
•
Diagnostics: if you opt in via iOS Settings, Apple may share anonymous, aggregated crash and performance data with us. This is not linked to your identity.
•
Support messages: if you contact us through the support form or by email, we receive the message and any contact detail you choose to include, solely to reply to you.
App Store purchase data
If you purchase a subscription or make an in-app purchase, the transaction is processed by Apple under Apple’s terms. We receive only the anonymized purchase and subscription status Apple provides (for example, whether a subscription is active) so we can unlock features. We never receive your payment card details.
Encrypted backups
Backups are end-to-end encrypted with a key that only you hold. We cannot read a backup, and restoring requires your key on the destination device. We do not store your backup or your key.
How we use information
We use the limited information described above only to:
•
Provide and maintain the App and its features;
•
Unlock purchased or subscribed features through Apple’s receipt data;
•
Respond to your support requests; and
•
Detect and fix crashes and bugs, and comply with our legal obligations.
How we share information
We do not sell your personal information, and we do not share it for advertising. We share information only:
•
With service providers strictly necessary to operate (for example, Apple for App Store distribution, purchases, and optional diagnostics);
•
If required by applicable law or valid legal process; and
•
In connection with a merger, acquisition, or sale of assets, subject to this policy.
Data retention
Because your accounts and codes live on your device, you control them directly and can delete them at any time by removing them in the App or deleting the App. Support messages are retained only as long as needed to handle your request.
Your rights in Europe (GDPR)
If you are in the United Kingdom, Switzerland, or the European Economic Area, you have rights over personal data we hold about you. Because the App is designed so that we do not collect identifying data, in most cases we hold no personal data about you. Where we do (for example, a support email), you may:
•
Request access to, correction, or deletion of that data;
•
Object to or request restriction of processing;
•
Request a portable copy; and
•
Lodge a complaint with your local supervisory authority.
To exercise these rights, contact privacy@company.com.
Your rights in California (CCPA)
If you are a California resident, you have the right to know what personal information is collected, to request deletion, and not to be discriminated against for exercising your rights. Authenticator 2FA MFA does not sell or share personal information for cross-context behavioral advertising. To make a request, contact privacy@company.com.
Children
The App is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from them.
International data transfer
Authenticator 2FA MFA is based in Türkiye. Any limited information we process (such as support correspondence) may be processed there, which may not provide the same level of data protection as your home jurisdiction.
Contact us
Questions about this Privacy Policy? Contact Authenticator 2FA MFA at privacy@company.com.