Privacy Policy

Last updated: 27 October 2026

This policy explains what the Authenticator app ("the app", "we") collects, what it does not, and the choices you have. It applies to the iOS and Android apps and to this website.

The short version

• Your 2FA secret keys and generated codes stay on your device. We do not have them and cannot read them.
• Passwords you save in the vault are encrypted on your device before anything is stored.
• Backups are encrypted before they leave your phone. The encryption key is derived from your passcode or your platform account and is not sent to us.
• We do not sell personal data.

What we collect

Account data you enter. Service names, account labels and secret keys that you add by scanning a QR code or typing. They are stored only on your device and in encrypted backups you choose to create.

Usage and crash data. Anonymous events such as "app opened", "account added" and crash reports, used to fix bugs and understand which features are used. This data does not include account names, codes or passwords.

Purchase data. When you subscribe, Apple or Google processes the payment. We receive a receipt and a subscription status so the app can unlock paid features. We never see your card details.

Support messages. If you write to us, we keep the email thread so we can answer you.

What we do not collect

• The one-time codes the app generates.
• The websites you open in the private browser. It keeps no history, cookies or cache after you close it.
• Contacts, photos, location or microphone. The camera is used only while you scan a QR code and the image is not stored.

Leak alerts

When you enable leak alerts, the app checks whether the email address or domain of a saved login appears in known public breaches. The check is done with a privacy-preserving method: only a partial hash is sent, never the full email or any password.

Backups and transfer

Backups are optional. When you turn them on, the app encrypts your data on the device and stores the encrypted file in your own iCloud or Google Drive, or exports it as a file you keep. Restoring on a new device requires the same passcode. If you lose the passcode we cannot recover the backup.

Third parties

We use a small number of service providers to run the app: app analytics and crash reporting, and the Apple App Store and Google Play billing systems. Each provider only receives the data needed for its function and is bound by its own privacy terms.

Advertising on this website

Links on this site may carry campaign parameters (for example utm_source) so we can tell which ads bring people to the store listing. These parameters identify a campaign, not you.

Children

The app is not directed at children under 13 and we do not knowingly collect data from them.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal data we hold, and to object to processing. Because account data lives on your device, deleting the app removes it. For support emails, analytics or purchase records, write to us and we will act within 30 days.

Changes

We will post updates on this page and change the date at the top. Material changes will be announced in the app.

Contact

Email support@authenticator-2fa.com. The app is published by BEGAMOB GLOBAL LIMITED.