AuthNook: 2FA Authenticator
AuthNook: 2FA Authenticator
Effective date: October 22, 2026
Developer: Krepel Studio
App: AuthNook: 2FA Authenticator
Android package: com.krepelstudio.authnook
Contact: Krepelstudio@gmail.com
Krepel Studio ("we", "us", or "our") develops AuthNook: 2FA Authenticator ("AuthNook" or the "App"). This Privacy Policy explains what information the App accesses, how that information is processed and stored, when data may leave your device, and the choices available to you.
AuthNook is designed to generate time-based and counter-based one-time passwords (TOTP and HOTP) and to manage your two-factor authentication information locally. You can use the core authenticator without creating an online account with Krepel Studio. The App does not provide an automatic cloud synchronization service operated by Krepel Studio.
To provide its functionality, AuthNook processes information that you add or import, including:
Authentication entry names, service names, account labels or email addresses entered as identifiers, and original TOTP/HOTP secret keys.
OTP settings such as algorithms, number of digits, time periods, HOTP counters, and QR/import information needed to generate valid codes.
Recovery codes that you choose to save, together with their used or unused status.
Local profile names, optional profile images, tabs, favorites, ordering, and related organization settings.
Preferences such as language, theme, vibration, and backup configuration.
Files that you explicitly select to import, back up, restore, or export.
This information is intended to stay on your device in App-controlled storage unless you explicitly export it or choose a separate storage provider.
We do not operate an online database of your OTP secrets or recovery codes, and AuthNook is not designed to upload those secrets to Krepel Studio servers.
Camera
If you choose to scan a QR code, the App requests access to your camera for that action.
Camera images and QR contents are processed on the device to recognize authentication information. The App is not designed to upload camera frames or record video.
You can decline camera access and enter a secret key manually.
Profile Images
If you choose a profile image through an Android system picker, the selected image is used locally for the profile.
The App does not require access to your full photo library for this purpose.
Biometric or Device Credential Verification
The App may use Android's system authentication interface before revealing original secret keys, transfer QR codes, saved recovery codes, or performing other sensitive operations.
Biometric matching is handled by the operating system. AuthNook does not receive or store your fingerprint, face template, or device PIN.
File Access
The App uses Android's system file and folder selection interfaces for user-authorized import, backup, restore, and export operations.
It does not need unrestricted access to all files on your device.
AuthNook is designed to encrypt its local authentication vault.
Manually created backup archives are password-protected and encrypted so that you can restore them on another compatible device using the backup file and the correct password.
Manual encrypted backup and restore are available in the Free version, subject to its limits of one local profile and three stored OTP entries.
Lifetime Pro allows additional profiles and entries, optional encrypted automatic backups to a folder you select, and a history of up to seven successful automatic backup versions.
Lifetime Pro also offers TXT export of original authentication secret keys.
A TXT export is not encrypted. Anyone who obtains the exported file may be able to generate authentication codes for the accounts listed in it.
AuthNook presents a warning and requests system authentication before creating this export. You are responsible for protecting and deleting unencrypted exported files.
You choose where export and backup files are saved through Android's file picker.
The destination may be local storage, removable storage, or a third-party document or cloud provider you select. If you select an external provider, that provider's own privacy and security practices apply.
AuthNook does not automatically upload backups to a Krepel Studio cloud service.
AuthNook offers an optional one-time Lifetime Pro purchase through Google Play Billing.
Google Play handles payment processing and may process transaction, account, and payment information under Google's terms and privacy policy.
AuthNook may receive product identifiers, purchase status, and purchase tokens or related confirmation information through Google Play Billing to activate or restore Pro access.
This information is used for purchase entitlement handling.
Krepel Studio does not ask the App to collect your full credit-card details or payment credentials.
Google's privacy information is available at:
https://policies.google.com/privacy
AuthNook is designed to work offline for OTP generation and local vault management.
We do not include advertisements, and we do not use AdMob, advertising identifiers, or advertising analytics in the App.
The App is not designed to send your original OTP secret keys, recovery codes, profile content, or QR scan results to Krepel Studio or advertising providers.
The use of Google Play Billing involves communication with Google Play to process and restore purchases, as explained above.
Information may leave your device when you explicitly choose to save, export, or transfer a file to another application or storage provider.
Such transfers are initiated by you and are subject to the chosen destination's security practices.
If you voluntarily contact us by email, we receive the message, your email address, and any information you choose to include.
We use that information only to respond to and manage your support request.
Please do not email us your OTP secret keys, recovery codes, or backup passwords.
AuthNook is designed to use encryption for locally stored authentication secrets and encrypted backups, with Android platform security mechanisms where appropriate.
Sensitive values are intended to be hidden until you authorize their disclosure through the App.
No software or device can guarantee absolute security.
A compromised device, a weak or disclosed backup password, or an unencrypted TXT export can expose authentication secrets.
Protect your device and backup files, use strong backup passwords, and store recovery information safely.
Authentication entries, profiles, recovery codes, and local settings remain on your device until you edit or delete them or remove the App, subject to Android's storage behavior.
You can delete individual authentication entries, recovery codes, and eligible profiles using the App's controls.
Removing the App normally removes its App-private local data.
Files you exported or backed up to a location you selected are separate copies and may remain there after you uninstall the App. You must delete those copies from the relevant storage location yourself.
We do not maintain a Krepel Studio server-side account or a server-side vault for AuthNook, so we cannot retrieve or erase private copies that exist only on your device or in storage you control.
Support emails are retained only as reasonably needed to handle requests, maintain appropriate records, or meet legal obligations.
You can contact us to request deletion of support correspondence where applicable.
You decide whether to use the optional camera scanner, select a profile image, export a file, create backups, enable automatic backups in Pro, or purchase Pro.
The primary OTP generation functionality is available without a Krepel Studio account.
You may access, correct, export where supported, or delete the authentication information held in your local vault using App controls.
Because we do not possess your locally stored authentication secrets, we generally cannot restore them for you if you lose both your device data and your backups.
Depending on applicable law, you may have additional privacy rights.
Contact us using the address below if you have a question or request concerning information we actually hold, such as your support correspondence.
We may update this Privacy Policy when the App's features, technical integrations, or legal requirements change.
We will publish the current version at the App's designated public Privacy Policy URL and update the effective date when appropriate.
Krepel Studio
Email: Krepelstudio@gmail.com
Website: https://krepelstudio.com/