Privacy Policy

This Privacy Policy describes how iAuthenticator ("we", "us", or "our") handles your personal data and privacy when you use our mobile application (the "App"). We are committed to protecting your privacy and ensuring you have complete control over your authentication data.

1. Zero-Knowledge Architecture & Data Collection

iAuthenticator operates on a strict "Zero-Knowledge" and "Offline-First" principle. We do not require you to create an account with us, nor do we collect, process, or store your Two-Factor Authentication (2FA) secrets, tokens, or personal identifiers on any external servers controlled by us.

• Local Storage: All your 2FA data is heavily encrypted and stored exclusively within the secure enclave of your device's local Apple Keychain.
• iCloud Synchronization (PRO Feature): If you opt-in to our premium synchronization feature, your encrypted data is synced across your devices using your personal Apple iCloud account. We do not have access to your Apple ID, iCloud storage, or the encrypted data residing within it.

2. Device Permissions and Usage

To provide specific functionalities, the App may request access to the following local device capabilities. This data is processed locally and never transmitted to us:

• Camera Access: Required strictly for scanning QR codes to add new 2FA accounts. The camera feed is processed in real-time on your device and is not recorded, saved, or uploaded.
• Photo Library Access: Required if you choose to import a QR code from a saved image. The App accesses only the specific image you select for the sole purpose of extracting the 2FA secret.
• Biometric Authentication (Face ID / Touch ID): Used to provide an additional layer of local security (App Lock). Biometric verification is handled entirely by iOS; the App only receives a success/failure callback and never accesses your actual biometric data.

3. Third-Party Analytics and Tracking

We respect your digital footprint. The App does not integrate with third-party tracking networks, advertising SDKs, or behavioral analytics tools. We rely solely on Apple's default, opt-in crash reporting mechanisms (via App Store Connect) to identify and fix technical bugs. These reports are anonymized and contain no personal authentication data.

4. Your Privacy Rights (GDPR & CCPA)

Depending on your location, you may have specific rights regarding your personal data under regulations such as the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). Because we do not collect or possess your personal data, requests for data access, portability, or deletion must be executed by you directly on your device:

• Deletion: You can delete all your 2FA data by removing the accounts within the App or by uninstalling the App from all your devices (which will clear the associated Keychain data and iCloud records).
• Portability: You may manually export your data using the App's built-in export functionalities (if applicable).

5. Children's Privacy

Our App is not directed to individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

6. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated policy within the App or on our website. Your continued use of the App after any such changes constitutes your acceptance of the new Privacy Policy.

7. Contact Information

If you have any questions, concerns, or inquiries regarding this Privacy Policy or our data practices, please contact us at: [email protected].