This Privacy Policy describes how the OTP & TFA Authenticator ("the Application") handles and protects information.
Privacy-First Authenticator: This application is strictly an offline tool for users. It is designed for secure two-factor authentication, account token management, and personal security record-keeping.
Our application is used solely for secure access and authentication operations. It helps our users securely manage TOTP (Time-Based One-Time Passwords) and verify their digital identity. This application does NOT connect to the internet, does NOT utilize cloud backups, and does NOT collect or process online payments.
Since this is an offline, privacy-first tool, the data collected is strictly limited to local operational needs:
Authentication Data: Account names, issuer names, and secret keys provided manually or via QR code scanning for generating OTP tokens.
Camera Access: The application requests camera access exclusively to scan QR codes for adding new 2FA accounts locally.
No Telemetry: We do not collect analytics, crash logs, or IP addresses.
The information is used only to facilitate secure authentication processes on your local device, such as:
Generating real-time, time-based one-time passwords (TOTP).
Storing your authentication credentials securely within the app's local database.
We use robust security measures to protect your authentication data from unauthorized access. This includes leveraging modern Android encrypted storage constraints and operating strictly in an offline environment to prevent network-based attacks.
As this is a private management tool, we do not share your information with any third-party marketing companies, trackers, or cloud servers. Data is kept exclusively within your device's private database for operational security.
We comply with all relevant regulations regarding data privacy and security management. Users of this tool are encouraged to follow best practices for device security.
For data deletion requests related to the OTP & TFA Authenticator: Because this application is 100% offline and does not create an account on any external server, users have full control over their data deletion. You can instantly and permanently delete an account directly within the application by swiping the account card and confirming the deletion, or by clearing the app data/uninstalling the application from your device.
Policy Inquiry: For any questions regarding this privacy policy, please contact the developer through the contact information provided on our Google Play Store listing.