隐私政策
适用于：Authenticator（iOS App） 生效日期：2026 年 9 月 24 日
本隐私政策说明“Authenticator”（以下简称“本应用”）如何处理你的信息。简而言之：本应用不收集、不上传、不出售任何个人数据，你添加的所有账户和密钥只保存在你自己的设备及你本人的 iCloud 钥匙串中，开发者无法访问。
1. 我们不收集的信息
- 本应用无需注册账号，不要求提供姓名、邮箱、手机号等任何个人信息。
- 本应用没有自己的服务器，不包含任何第三方统计、广告、崩溃收集或追踪 SDK。
- 我们不会追踪你在其他公司的 App 或网站上的活动。
2. 保存在你设备上的数据
- 两步验证账户与密钥：包括服务名称、账户名、密钥和列表顺序，保存在 iOS 钥匙串中，仅在设备解锁时可读取。
- iCloud 钥匙串同步：如果你在系统中开启了 iCloud 钥匙串，上述数据会由 Apple 端到端加密后同步到你登录同一 Apple 账户的其他设备，Apple 与开发者均无法读取其内容，适用 Apple iCloud 数据安全说明。未开启时，数据仅保存在本机。
- 应用设置：例如是否开启应用锁，保存在本机。
- 在应用内删除账户时，该账户也会从你其他通过 iCloud 同步的设备上移除。
3. 设备权限的使用
- 相机：仅用于扫描两步验证二维码，画面在本机实时识别，不会被保存或上传。
- 照片：通过系统照片选择器仅读取你主动选择的那一张图片，用于识别其中的二维码，识别后不会保存或上传。本应用无法访问你的其他照片。
- 面容 ID / 触控 ID：由 iOS 系统完成验证，本应用只获得“验证是否通过”的结果，无法获取你的任何生物特征数据。
- 剪贴板：仅在你轻点验证码时写入该验证码，设置为仅限本机并在 60 秒后自动过期。本应用不会读取你的剪贴板。
4. 订阅与付款
订阅通过 Apple App Store 完成，付款、续订和退款均由 Apple 处理，适用 Apple 隐私政策。本应用只通过 Apple 的 StoreKit 在本机验证你是否拥有有效订阅，无法获取你的 Apple 账户、付款方式或账单信息。
5. 数据共享
由于我们不收集任何个人数据，因此不会与任何第三方共享、出租或出售你的数据。
6. 数据安全
密钥由 iOS 钥匙串加密保护，经 iCloud 同步时为端到端加密。你还可以在应用内开启面容 ID / 触控 ID / 设备密码锁，应用进入后台时会自动隐藏验证码。导出账户二维码前需要再次验证身份。
7. 儿童隐私
本应用不面向 13 岁以下儿童，也不会有意收集任何儿童的个人信息。
8. 你的权利
所有数据都在你的设备与你本人的 iCloud 钥匙串中，你可以随时在应用内编辑或删除任意账户，删除会同步到你的所有设备。由于我们不持有你的数据，无法也不需要为你提供数据查询或删除服务。
9. 政策更新
如本政策发生变更，我们将在本页面发布更新后的版本并修改生效日期。重大变更会在应用更新说明中提示。
10. 联系我们
如对本隐私政策有任何疑问，请通过 GitHub Issues 联系我们。
Privacy Policy
Applies to: Authenticator for iOS Effective date: September 24, 2026
This policy explains how Authenticator (“the App”) handles your information. In short: the App does not collect, upload, or sell any personal data. All accounts and secrets you add stay on your own devices and in your own iCloud Keychain, which we cannot access.
1. Information we do not collect
- No sign-up is required. The App never asks for your name, email, phone number, or any other personal information.
- The App has no servers of its own and contains no third-party analytics, advertising, crash reporting, or tracking SDKs.
- We do not track you across apps or websites owned by other companies.
2. Data stored on your device
- Two-factor accounts and secrets (issuer, account name, secret key, and list order) are stored in the iOS Keychain and are readable only while the device is unlocked.
- iCloud Keychain sync: if you have iCloud Keychain turned on, this data is end-to-end encrypted by Apple and synced to your other devices signed in to the same Apple Account. Neither Apple nor we can read it (see iCloud data security overview). If iCloud Keychain is off, the data stays on this device only.
- App settings, such as whether the app lock is enabled, are stored locally.
- Deleting an account in the App also removes it from your other devices synced via iCloud.
3. Device permissions
- Camera: used only to scan two-factor QR codes. Frames are processed on-device and never saved or uploaded.
- Photos: through the system photo picker, the App reads only the single image you choose, to detect a QR code in it. The image is not saved or uploaded, and the App cannot access your other photos.
- Face ID / Touch ID: authentication is performed by iOS. The App only receives a success or failure result and never has access to biometric data.
- Clipboard: the App writes a code only when you tap it, marked local-only and set to expire after 60 seconds. The App never reads your clipboard.
4. Subscriptions and payments
Subscriptions are sold through the Apple App Store. Payment, renewal, and refunds are handled by Apple under the Apple Privacy Policy. The App only uses Apple’s StoreKit on your device to check whether you have an active subscription, and has no access to your Apple Account, payment method, or billing details.
5. Data sharing
Because we collect no personal data, we do not share, rent, or sell any data to third parties.
6. Security
Secrets are protected by the encrypted iOS Keychain and are end-to-end encrypted when synced through iCloud. You can also enable a Face ID / Touch ID / passcode lock; codes are hidden when the App moves to the background, and exporting an account QR code requires authentication.
7. Children’s privacy
The App is not directed at children under 13 and does not knowingly collect personal information from children.
8. Your rights
All data lives on your devices and in your own iCloud Keychain. You can edit or delete any account in the App at any time, and deletions sync to all your devices. Since we hold none of your data, there is nothing for us to access or delete on your behalf.
9. Changes to this policy
If this policy changes, we will post the updated version on this page and revise the effective date. Significant changes will be noted in the App’s release notes.
10. Contact
If you have any questions about this policy, please contact us via GitHub Issues.
Authenticator