Effective date: September 21, 2026
This Privacy Policy explains how Auth Code: 2FA Authenticator (“the App”, “we”, “our”, or “us”) handles information when you use the App.
If you have any questions, contact us at: kivanna9922@ukr.net
The App is designed to keep your authenticator data private and stored securely.
When you add an account, the App may store account labels, issuer names, account names, OTP settings, counters, and secret keys needed to generate authentication codes.
Your OTP codes are generated on your device. We do not operate a custom backend server for your authenticator accounts, and we do not receive, read, or store your OTP secret keys on our own servers.
The App may request camera access so you can scan QR codes and add authenticator accounts. Camera data is used only for QR scanning inside the App and is not sent to us.
If you enable Face ID, Touch ID, device passcode protection, hidden codes, auto-lock, widgets, or local backups, the App uses Apple system features to protect access to your data. Biometric data is handled by iOS and is not collected or accessed by us.
The App may offer paid Premium features. Purchases and subscription status are processed through Apple’s App Store and may be managed with Apphud. We may receive purchase-related information such as subscription status, product identifiers, transaction status, device/app information, and related diagnostics needed to provide Premium access, restore purchases, prevent fraud, and maintain the purchase system.
We do not receive your full payment card details.
If you choose to enable iCloud Sync, your authenticator vault may be encrypted and stored in your private iCloud database. This sync is optional and uses Apple iCloud/CloudKit infrastructure. The encrypted vault may include account names, OTP settings, counters, and secret keys inside encrypted data.
The encryption key is stored using iCloud Keychain. We do not operate a separate server that stores your vault or your OTP secrets.
If you export a backup, the backup file is encrypted with a password you choose. We do not know or store this password. If you forget the password, we cannot recover the backup for you.
We use information only as needed to:
generate authenticator codes on your device;
store and manage your authenticator accounts;
scan QR codes when you choose to add accounts by camera;
enable optional security settings;
enable optional encrypted iCloud Sync;
provide, verify, and restore Premium subscription access;
respond to support requests;
maintain app functionality and troubleshoot issues.
We do not sell your personal information.
We may share or process limited information through the following third-party services where necessary:
Apple: App Store purchases, StoreKit, iCloud, CloudKit, iCloud Keychain, device security features, and crash/diagnostic systems controlled by Apple settings.
Apphud: subscription management, paywall configuration, purchase status, and related app/device information needed to provide Premium access.
These services process data according to their own privacy policies and platform rules.
Authenticator secrets are stored using Apple Keychain where supported by the App. Account metadata may be stored locally on your device. Optional iCloud Sync stores encrypted vault data in your private iCloud account.
We use reasonable technical safeguards, including local secure storage and encryption features, to protect your data. However, no method of storage or transmission is completely secure.
Authenticator data remains on your device until you delete it, uninstall the App, erase your device, delete backups, or remove synced data from iCloud where applicable.
Purchase-related information may be retained by Apple and Apphud as needed for subscription management, fraud prevention, legal compliance, and service operation.
Support emails are retained only as long as needed to respond to your request and maintain support records.
You can:
delete authenticator accounts inside the App;
disable iCloud Sync in the App settings;
delete local backups from wherever you saved them;
manage or cancel subscriptions in your Apple ID subscription settings;
revoke camera permission in iOS Settings;
contact us to request help with privacy-related questions.
Because authenticator data is primarily stored locally on your device or in your own iCloud account, deleting the App or removing the relevant iCloud data may be required to fully remove locally/synced data.
The App is not intended to knowingly collect personal information from children. If you believe a child has provided us personal information through a support request, contact us and we will take appropriate steps to delete it.
Your information may be processed in the country where you use the App and in other locations where Apple, Apphud, or their service providers operate.
We may update this Privacy Policy from time to time. When we do, we will update the effective date above. Continued use of the App after changes means you accept the updated Privacy Policy.
If you have questions about this Privacy Policy or your data, contact us at:
kivanna9922@ukr.net