Privacy Policy
Welcome to Authenticator (the “App”). We value your privacy and explain below how the App handles information. By continuing to use the App, you acknowledge this Policy.
1. Who We Are
The App is developed and operated by YOM LIMITED. It is a TOTP (RFC 6238) authenticator that helps you manage two-factor authentication (2FA) tokens and generate verification codes on-device.
2. What Information We Collect
The App does not collect personal information for accounts, advertising, or profiling. Core features run on-device and do not sync secrets or codes to our servers.
- Token data (stored locally): issuer name, account name, and secret. Secrets use system secure storage (e.g. iOS Keychain / Android Keystore); metadata is stored in on-device preferences. This data is not uploaded to our servers.
- App settings: such as language and whether to show codes in the list, stored only on-device.
- We do not actively collect: name, phone number, email, precise location, contacts, photo library content, or device identifiers for marketing or tracking.
If you download the App from the Apple App Store, Google Play, or other marketplaces, those platforms may process download, payment, or diagnostic data under their own policies. Please also review the applicable platform privacy policy.
3. Permissions
- Camera: used only when you choose to scan an otpauth QR code to import a token. We do not use the camera in the background or upload camera frames to a server.
- Clipboard: written only when you choose to copy a code, secret, or otpauth URI. We do not silently read the clipboard for analytics.
4. How We Use Information
On-device token and setting data is used only to:
- generate and display TOTP codes on-device according to the standard algorithm;
- show your token list and details, and support copy and delete;
- remember preferences such as language.
We do not use your secrets or codes for advertising, sale, or sharing with third parties.
5. Storage & Security
- Token secrets are stored using the operating system’s secure storage APIs.
- Codes are computed locally and do not pass through our network services.
- Uninstalling the App or deleting a token removes the corresponding local data and is typically irreversible. Please proceed with care.
Local storage may still be at risk if the device is lost, jailbroken/rooted, or compromised. Please secure your device with a lock screen and similar protections.
6. Third-Party Services & SDKs
Core features do not integrate analytics or advertising SDKs. QR scanning uses the system camera and on-device open-source components; related processing occurs on your device.
7. Children’s Privacy
The App is a general security utility and is not directed at children. If you are a guardian and believe a minor used the App without consent, contact us as described below.
8. Your Choices
- You may delete individual tokens in the App or uninstall the App to remove local data.
- You may revoke camera access in system settings; QR import will stop working, while other local features remain available.
9. Changes to This Policy
We may update this Policy from time to time. The updated version will be posted on this page with a revised date. For material changes that significantly affect your rights, we will provide notice in the App or by other reasonable means.
10. Contact Us
For questions about this Policy or our privacy practices, contact us at:
- Operator: YOM LIMITED
- Product: Authenticator
- Contact: use the developer / App Support contact options on the Apple App Store or other marketplace listing pages.