Hainan Michuang Technology Co., Ltd. ("we," "us," or "our") operates the Authenticator iOS application (the "App"). We value the privacy and security of your personal information. This Privacy Policy explains how we process and protect information when you use the App and how you may exercise your privacy rights.
Please note:
1. The App provides two-factor authentication codes (2FA/TOTP), password storage, system AutoFill, and private browsing. Website accounts, passwords, 2FA secrets, and one-time codes stored in your vault are highly sensitive. Vault data is encrypted on your device and is not used for advertising, attribution, or behavioral analytics.
2. Automatic iCloud sync is off by default. Only after you enable it will encrypted vault records be synchronized between your devices through your private Apple iCloud database.
3. Camera access is used only to scan 2FA QR codes. QR images and extracted secrets are processed on the device and are not uploaded to us as part of scanning.
4. Face ID or Touch ID templates are managed by iOS and the device security hardware. The App receives only an authentication result and cannot read, store, or upload your face or fingerprint data.
5. Choosing to reset the App after forgetting your App Lock password deletes vault data. If iCloud sync is enabled, the deletion will also be synchronized to associated devices. This action cannot be undone.
1. Scope of this Privacy Policy
2. Information We Process and How We Use It
3. System Permissions and Capabilities
4. Sharing, Service Providers, Transfers, and Disclosure
5. Storage and Retention
6. How We Protect Information
7. Your Rights and Choices
8. Children's Privacy
9. Changes to this Privacy Policy
10. Contact Us
This Privacy Policy applies to the Authenticator iOS App and the services offered in its current version. Third-party websites and services that you visit through the App's private browser are independently operated and governed by their own privacy policies.
We process information only to the extent reasonably necessary to provide specific features, operate and secure the App, or comply with applicable law. You may decline optional information or permissions. If information is required for a particular feature, declining it may make that feature unavailable but will not affect unrelated features.
When you scan a QR code or manually enter a secret to add a 2FA account, the App processes the service name, account name, 2FA secret, code type, algorithm, number of digits, refresh period, and related settings that you provide. This information is used to generate one-time codes on your device and display your account list.
2FA secrets and related account data are encrypted on your device. They do not leave the device for this feature unless you enable iCloud sync. When you copy a one-time code, the code is temporarily written to the iOS clipboard. Other apps with permitted clipboard access may be able to read clipboard contents under iOS rules.
When you create, edit, or import a password entry, the App processes the website or service name, URL, username, password, notes, and modification time to store, search, display, and AutoFill the entry. Random passwords are generated on the device.
Password entries are encrypted on the device, and Password History retains only the 10 most recent versions. When you copy a username or password, it is temporarily written to the iOS clipboard. We do not use vault URLs, usernames, passwords, or notes for analytics, advertising, or attribution.
After you enable the App's AutoFill extension in iOS Settings, iOS may provide the extension with the current website domain, service identifier, or app identifier so that matching credentials can be identified on the device. After you select a credential and complete the authentication required by the App, the iOS AutoFill Credential Provider supplies the selected username, password, or one-time code to the active field.
To allow the main App and AutoFill extension to work together, an encrypted credential snapshot and necessary state may be stored in a shared area protected by App Group and Keychain access controls. Matching and decryption occur on the device. Your credential content is not sent to our servers for AutoFill.
Your App Lock password controls access to the App. Security information used to verify that password is stored in the system Keychain. The App Lock password is not sent to our servers.
If you enable Face ID or Touch ID, the App requests authentication through Apple's LocalAuthentication framework. Biometric templates remain under the control of iOS and device security hardware, and the App receives only the authentication result.
Automatic iCloud sync is off by default. After you enable it, the App stores encrypted 2FA accounts, password entries, deletion status, sync versions, and necessary synchronization metadata in the CloudKit private database associated with your Apple ID. This allows synchronization across devices authorized for your account. Apple processes Apple ID, iCloud account, device, and network information under its own terms. We cannot access your Apple ID password.
Turning sync off stops future automatic synchronization but does not by itself delete records already stored in iCloud. You may delete individual entries or use the App's reset feature to remove vault data from the associated devices and iCloud private database.
The private browser uses a non-persistent website data store and does not intentionally retain browsing history, cookies, cache, or login state in the App after the private session is closed. The App removes temporary website data when the session ends.
When you visit a webpage or use a search service, the URL, search terms, IP address, device and browser information, and content you submit are sent directly to the relevant website, search provider, network service provider, or their partners. Their handling of information is governed by their own privacy policies. iOS, network providers, and websites may retain their own access records, which the App cannot delete on their behalf.
When you view subscription products, purchase an auto-renewable subscription, or restore purchases, we and the applicable purchase service providers process product identifiers, price and currency, order or transaction identifiers, subscription and trial status, purchase results, refund or revocation status, and device or app information necessary to verify entitlement. Payments are processed by the Apple App Store. We do not directly collect your card number, payment password, or other payment account credentials.
After you agree to this Privacy Policy and use the App, we and relevant service providers may process device model and name, iOS and App version, language, region, time zone, network IP address, identifier for vendor (IDFV), an App-scoped persistent user identifier, AppsFlyer UID, installation and update times, session identifiers, page views, button taps, feature usage, subscription status, errors, and request results. We use this information to operate and secure the App, understand feature usage, diagnose problems, and prevent abnormal activity.
After you grant "Allow Tracking" through iOS, we and attribution providers may also process the advertising identifier (IDFA) to measure ad campaign performance and app install attribution. If you deny permission, we will not obtain a usable IDFA and core App features will remain available. Aggregated attribution methods or device-scoped identifiers that do not depend on IDFA may still be used for basic measurement. Apple Ads attribution may be resolved through Apple AdServices without accessing your vault content.
Analytics and attribution information does not include your 2FA secrets, one-time codes, website usernames or passwords, vault notes, or the content of webpages viewed in the private browser.
If you contact us by email, we process your email address, message, screenshots or attachments you choose to provide, and correspondence history to investigate the issue, respond to your request, handle complaints, and improve the App. Do not include passwords, 2FA secrets, one-time codes, or unrelated sensitive information in support messages.
The App does not enable every system permission by default. We request a permission when the corresponding feature requires it. You may manage or revoke permissions in iOS Settings.
| Permission or capability | Purpose | Required? |
|---|---|---|
| Camera | Scan and process 2FA QR codes on the device. Camera frames are not uploaded to us for scanning. | Only for QR scanning; you may add an account by entering the secret manually. |
| Face ID / Touch ID | Authenticate you to unlock the App or authorize AutoFill. The App does not access biometric templates. | Optional; requires a supported device and biometrics enrolled in iOS. |
| Tracking authorization | Access the IDFA after permission is granted to measure advertising and install attribution. | Optional; denial does not affect core features. |
| iCloud / CloudKit | Store and synchronize encrypted vault records in your private Apple iCloud database. | Optional and off by default. |
| Password AutoFill extension | Match and fill a credential or one-time code that you select in Safari or another supported app. | Optional; you must enable it in iOS Settings. |
| Network access | Visit webpages, sync iCloud, load and verify subscription products, display legal documents, and perform necessary analytics, attribution, and security requests. | Required for online features. Local codes and local vault features can operate without a network connection. |
The current version does not request Photos, Location, Contacts, or Microphone permission. If a later feature requires another permission, we will explain its purpose before requesting it and update this Privacy Policy as appropriate.
We do not sell your personal information and do not provide plaintext vault content to third parties. We may use the following services to the minimum extent necessary to provide specific App functionality:
| Provider or service | Information that may be processed | Purpose and privacy policy |
|---|---|---|
| Apple Inc. (iOS, LocalAuthentication, CloudKit/iCloud) | Permission status, biometric authentication results, Apple ID and iCloud account-related information, device and network information, encrypted vault records that you choose to sync, and synchronization metadata. | System permissions, biometric authentication, and optional iCloud sync. Apple Privacy Policy |
| Apple Inc. (App Store and StoreKit) | Product and transaction identifiers, subscription and trial status, and purchase, refund, revocation, or restoration results. | In-app purchases, subscription management, and entitlement verification. Apple Privacy Policy |
| Apple Inc. (AdServices and AppTrackingTransparency) | Tracking permission status, IDFA after permission, Apple Ads attribution token, install source, and attribution result. | Request tracking permission and measure Apple Ads performance. Apple Privacy Policy |
| Analytics service operated by Hainan Michuang Technology Co., Ltd. | Device model and name, iOS and App version, language, region, time zone, network IP address, IDFV, usable IDFA after permission, install and update times, session identifier, page and button events, feature usage, subscription status, errors, request results, and attribution results that exclude vault content. | App operation analysis, feature measurement, troubleshooting, security, subscription analysis, and campaign measurement. We process this data under this Privacy Policy. |
| AppsFlyer Ltd. (AppsFlyer) | Device and App information, network IP address, IDFV, App-scoped user identifier, AppsFlyer UID, install source, campaign and attribution results, feature and subscription events, and IDFA only after tracking permission. Vault content is not provided. | Install attribution, campaign measurement, and App usage analytics. AppsFlyer Privacy Policy |
| RevenueCat, Inc. (when this subscription channel is enabled) | App user identifier, device and App information, product identifier, transaction receipt, subscription status, and purchase or restore results. Vault content is not provided. | Load subscription products, complete purchases, restore purchases, and synchronize subscription entitlements. RevenueCat Privacy Policy |
| Websites, search services, and their providers that you visit through the private browser | Visited URLs, search terms, IP address, device and browser information, and information that you submit to the website. | Load third-party webpages that you choose to visit. Their own privacy policies apply. |
Outside the circumstances described above, we disclose personal information only with your consent, to comply with legal obligations or lawful requests from competent authorities, or as otherwise permitted by applicable law.
If personal information is transferred as part of a merger, division, reorganization, asset transfer, or similar transaction, we will provide notice as required by law and require the recipient to continue to protect the information under this Privacy Policy. If the recipient changes the purpose or method of processing, it must obtain any consent required by applicable law.
2FA accounts, password entries, App Lock verification information, and related encryption keys are primarily stored on your device and in the system-protected Keychain until you delete an entry, reset the App, or remove the data through available system controls. Password History retains only the 10 most recent versions.
After you enable sync, encrypted vault records are stored in the CloudKit private database associated with your Apple ID. Retention depends on your deletion actions, sync status, and Apple's iCloud service rules. Data may be processed in locations determined by your Apple ID settings and Apple's service arrangements.
We retain this information only for the shortest period reasonably necessary for analytics, troubleshooting, security, transaction verification, customer support, dispute resolution, and compliance with legal obligations. We delete or anonymize information after it is no longer necessary, unless a longer period is required by law or reasonably necessary to resolve a dispute.
Apple, AppsFlyer, RevenueCat, or third-party websites that you choose to visit may process information outside mainland China or outside your country or region. Where applicable law treats this as a cross-border transfer, we will provide required notices, obtain required consent, and implement required safeguards.
We use safeguards appropriate to the sensitivity of the information, including on-device encryption, Keychain key protection, access control, biometric authentication, App Group isolation, a private CloudKit database, least-privilege authorization, and security logging. The AutoFill extension accesses only the data needed to complete an authorized fill operation.
No storage or transmission method can guarantee absolute security. Protect your device, Apple ID, App Lock password, and recovery methods, and do not disclose website passwords, 2FA secrets, or one-time codes to others.
If a personal information security incident occurs, we will take remedial measures and provide notices required by applicable law, which may include an in-App notice, announcement, email, or another reasonable method.
Subject to applicable law, you may have rights to access, copy, correct, supplement, or delete personal information; withdraw consent; restrict or object to certain processing; request an explanation of this Privacy Policy; and submit a complaint regarding our processing.
For requests that cannot be completed directly in the App, contact us at the email address below. We may need to verify your identity to protect vault security and will respond within the period required by applicable law. Because plaintext vault data is encrypted locally and is not accessible to us, we may be unable to recover, export, or restore it for you.
The App is not specifically designed for children under 14. If you are under 14, use the App only after your parent or legal guardian has reviewed and agreed to this Privacy Policy. If we learn that we processed the personal information of a child under 14 without required guardian consent, we will delete it or take other required measures as soon as reasonably possible.
A parent or guardian may contact us regarding the processing of a child's information or to exercise applicable rights.
We may update this Privacy Policy when App features, laws, regulations, or our service model change. If a change is material, we will provide notice through an in-App prompt, prominent notice, announcement, or another reasonable method and obtain consent again where required by law. We will not reduce your rights under this Privacy Policy without your explicit consent where such consent is legally required.
If you have a question, request, suggestion, or complaint about this Privacy Policy, our processing of personal information, or children's privacy, contact us:
Operator: Hainan Michuang Technology Co., Ltd. (海南幂创科技有限公司)
Email: mediaapps.marketing@gmail.com
We will process and respond to your request after any necessary identity verification and within the period required by applicable law.