Privacy Policy

Last updated: May 25, 2026

This Privacy Policy describes how Auth 2FA ("we", "us", or "our") handles information when you use the Auth 2FA - Secure Two-Factor Authenticator mobile application (the "App"), published by ZediApps. We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

1.1 No User Accounts

The App does not require or offer user accounts. We do not collect your name, email address, phone number, or any other personally identifiable information (PII).

1.2 Locally Stored Data

The App stores the following data locally on your device:

  • Account labels - the issuer and account name you assign to each two-factor entry (e.g. "GitHub - you@example.com")
  • App preferences - tap behavior, clipboard auto-clear timeout, biometric lock setting, and similar options

This data is stored entirely on your device and is never uploaded to any server. We do not have access to your data.

1.3 Two-Factor Secrets

The secret keys used to generate your one-time codes (TOTP/HOTP seeds) are stored exclusively in the iOS Keychain, the operating system's encrypted, hardware-backed secure storage. They never appear in logs, are never transmitted off the device, and are only ever included in a backup file that you create and encrypt with your own passphrase.

1.4 Device Permissions

The App requests only the permissions it needs, each only when needed. You can revoke them at any time in your device settings.

  • Camera - used only to scan setup QR codes when you add an account. Camera frames are processed on-device and never recorded, stored, or transmitted.
  • Face ID / Touch ID - used only to unlock the App and gate sensitive screens. Biometric data never leaves your device and is handled entirely by iOS; the App never sees it.

2. No Third-Party Tracking

The App does not include any third-party analytics, advertising, or tracking SDKs. We do not use Firebase, Google Analytics, or any similar service. No usage data, identifiers, or behavioral information is collected or shared with anyone.

3. Security of Your Data

Your two-factor secrets live in the iOS Keychain and never leave your device. Backups you create are encrypted with AES-256 using a passphrase that only you know — we cannot read or recover them. Copied codes can be set to clear from the clipboard automatically after a timeout you choose.

4. Pricing

The App is free to use. It contains no in-app purchases or subscriptions.

5. Data Deletion

Since your data is stored locally on your device:

  • You can delete individual items within the App using its built-in features.
  • You can delete all App data by uninstalling the App.
  • There is no remote data to delete since we do not store your information on servers.

6. Children's Privacy

The App is not directed to children under 13 and does not knowingly collect personal information from them. Since the App does not require accounts or collect personal information, it is safe for users of all ages.

7. International Users

The App is available worldwide. By using the App, you consent to the practices described in this Privacy Policy regardless of your country of residence. We comply with applicable laws including the GDPR (EU/UK) and CCPA (California).

8. Your Rights

Depending on where you live, you may have rights under data protection laws (GDPR, CCPA, etc.) including the right to access, correct, or delete your personal information. Because we do not collect personal information, most of these rights are satisfied automatically — your data lives on your device under your control. For any questions, contact us using the email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: