Information we handle
Authenticator stores the account labels, issuer names, setup secrets, categories, and preferences you add to the app. This information is required to generate and organize your one-time passwords.
The app may process camera images when you scan a QR code. Camera access is requested only when you choose to scan, and manual entry remains available. Selected images are analyzed on the device.
How information is used
Your data is used to generate time-based one-time passwords, organize accounts, provide app security features, and perform actions you request. We do not sell personal information. Setup keys, account labels, OTPs, categories, QR payloads, and clipboard values are not sent to analytics or a Nodebin-operated backend.
Local storage, backup, and sync
Authentication data is encrypted on your device. Optional backup and sync are off by default. When enabled, the app encrypts data before it leaves your device. Cloud providers (such as Apple or Google) may process encrypted data under their own terms. The design does not send plaintext token material to a Nodebin-operated backend.
Advertising
If you use the free tier, the app may show ads served by Google AdMob. AdMob and related Google advertising services may collect device information, advertising identifiers, approximate location, and interaction data under Google’s policies, and may show personalized or non-personalized ads depending on your consent and region.
Where required, the app shows a consent form (UMP) before ads run. You can open ad privacy options from Settings when available in your region. Premium subscribers do not see ads.
Purchases and subscriptions
Optional Premium is sold through the App Store or Google Play. Apple, Google, and our subscription partner Qonversion may process purchase, renewal, and entitlement metadata needed to unlock Premium features. They do not receive your authenticator secrets.
Your choices and retention
You can add, edit, export where available, or delete accounts in the app. Deleting app data removes locally stored records subject to operating-system backup behavior. You can disable optional sync and backup at any time, manage store subscriptions in the App Store or Google Play, and manage ad personalization where your region provides that control.
Authenticator is not directed to children under 13. We may update this policy as the product or legal requirements change; the effective date above identifies the latest version.
Contact
For privacy questions or requests, email [email protected].