Effective Date: September 18, 2026
Last Updated: September 18, 2026
This Privacy Policy explains how Easy Auth (the “App,” “we,” “us,” or “our”) handles information when you use its two-factor authentication, password vault, encrypted backup, account review, AutoFill, file privacy, subscription, analytics, and support features.
Easy Auth does not require you to create a developer-operated account. The App is designed so that your authentication secrets, generated verification codes, saved passwords, recovery passwords, encrypted backup contents, and files selected for privacy review are processed on your device and are not uploaded to us for storage or analytics.
1. Information Processed Only on Your Device
The App may process and store the following information locally:
- TOTP setup QR-code contents, secret keys, account labels, issuer names, generated one-time codes, and related settings;
- Saved usernames, passwords, website or service labels, notes, and other vault records;
- PIN settings and the result of a biometric authentication request. Face ID or Touch ID biometric templates are handled by iOS and are not available to us;
- Account review plans, review history, security findings, and local review backups;
- Encrypted backup contents and the recovery passwords you choose for those backups;
- Photos, PDFs, and other files you select for metadata review or privacy cleanup, including temporary working copies and mosaic edits; and
- App settings and preferences.
TOTP secrets and encryption keys are protected using the iOS Keychain. Password and review records are encrypted on the device. The AutoFill extension accesses the local encrypted vault through the App’s shared on-device container; it does not upload credentials to us.
The App does not automatically send the content listed above to our servers or to Firebase Analytics. We cannot recover your TOTP secrets, passwords, encrypted backup contents, or recovery passwords.
2. Information Collected or Transmitted
The App uses limited network services for configuration, subscriptions, product analytics, and support. Depending on the feature you use, the following information may be transmitted:
App, Device, and Installation Information
- A randomly generated installation identifier (CUID);
- A Firebase App Instance ID when Firebase Analytics is enabled;
- App version, build number, platform, device model, display resolution, preferred language, locale, region, time zone, and related technical information; and
- Connection information ordinarily received when a network request is made, such as IP address, request time, and network or server logs.
The CUID is not derived from your name, email address, advertising identifier, IDFA, or device serial number. It is stored in UserDefaults and the iOS Keychain and may remain in the Keychain after the App is uninstalled and later reinstalled.
Product Analytics
Easy Auth uses Firebase Analytics and our own service to understand whether features work and how the App is used. Analytics may include:
- App launches and sessions;
- Onboarding page views and button taps;
- Visits to major features and settings;
- Fixed action categories, coarse item counts, permission statuses or results, and processing or export outcomes; and
- Subscription page source, selected product, and purchase outcome.
Analytics events may be associated with the installation identifier or Firebase App Instance ID. They do not include TOTP secrets or codes, passwords, PINs, biometric data, backup contents or recovery passwords, support message content, or the contents of photos and files selected for privacy cleanup.
Subscription and Purchase Information
Purchases are processed by Apple through StoreKit. To create an order, verify a transaction, restore or maintain subscription access, and diagnose purchase failures, the App may send our service information such as:
- Product ID and subscription selection;
- Order and trace identifiers;
- Apple transaction identifier and signed StoreKit transaction data;
- Purchase status, verification result, entitlement status, and limited error information; and
- The App, device, installation, language, and region information described above.
We do not receive your full payment card details. Apple independently handles payment information under Apple’s privacy terms.
Support Information
If you choose to contact support from the App, the App opens an email draft that includes the App version, installation identifier, device model, and iOS version. Your email address, message, and this technical information are shared with us only if you send the email. No password, TOTP secret, backup, photo, or file is attached automatically.
3. How We Use Information
We use transmitted information only to:
- Deliver App configuration, subscription products, and membership status;
- Create, validate, restore, and maintain purchases and entitlements;
- Operate, secure, troubleshoot, and improve the App;
- Measure feature reliability and product interaction in aggregate;
- Prevent abuse, investigate errors, and protect the integrity of purchase processing;
- Respond to support and privacy requests; and
- Comply with legal, tax, accounting, or regulatory obligations.
We do not use authentication secrets, passwords, selected file contents, or recovery passwords for analytics, advertising, profiling, or tracking.
4. Service Providers and User-Directed Sharing
Information may be handled by the following recipients only as needed for the purposes described in this Policy:
- Google Firebase Analytics, which processes installation and product interaction data for analytics;
- Apple, which provides the App Store, StoreKit purchases, system permissions, Keychain, AutoFill, Photos, Files, and other iOS services;
- Our application gateway and hosting providers, which process configuration, analytics, technical request data, and purchase confirmation information on our behalf; and
- Services you choose, such as your email provider, iCloud Drive or another file provider, Photos, or an app selected from the iOS share sheet.
Encrypted backups are saved only to a location you choose. Files selected for privacy cleanup are processed locally. A cleaned copy leaves the App only when you choose to save, export, or share it. Your original file is not changed by the cleanup process.
Third-party services process information under their own terms and privacy policies. Google provides information about Firebase privacy at Firebase Privacy and Security, and Apple provides its privacy policy at Apple Privacy Policy.
5. Device Permissions
The App may request the following optional permissions:
- Camera: to scan a 2FA QR code. QR-code data is analyzed on the device and is not uploaded to us;
- Photos: to let you select an image using the system picker and to save a cleaned copy when you request it. Add-only Photos permission may be requested for saving;
- Face ID or Touch ID: to unlock protected local information. iOS performs biometric matching and provides only the authentication result to the App;
- Notifications: to schedule local account review reminders on your device; and
- Files: to import or export a file through the iOS document picker.
You can deny or revoke permissions in iOS Settings. Some related features may then be unavailable, but manual 2FA setup remains available if camera access is denied.
6. No Sale, Advertising, or Cross-App Tracking
We do not sell or rent personal information. The App does not display third-party advertising, does not collect the advertising identifier, and does not track you across apps or websites owned by other companies for advertising or data-broker purposes.
Product analytics associated with an installation identifier are used only for the operational and analytics purposes described in this Policy and are not used for cross-app tracking.
7. Retention and Deletion
- Local data: TOTP entries, vault records, review data, settings, and local working data remain on your device until you delete an item, clear local data under Settings › Data, or uninstall the App, subject to iOS backup or restoration behavior.
- Exported data: Encrypted backups and cleaned copies remain wherever you saved or shared them until you delete them from that destination.
- Installation identifier: The CUID stored in the iOS Keychain may remain after uninstalling and may be reused if the App is reinstalled.
- Analytics and operational records: We retain these records only for as long as reasonably necessary to understand product operation, troubleshoot issues, maintain security, and meet the purposes described in this Policy. Records are then deleted or de-identified, subject to provider configuration and legal requirements.
- Purchase records: Purchase and transaction records may be retained for as long as necessary to verify entitlements, handle refunds or disputes, prevent fraud, and satisfy legal, tax, and accounting requirements.
- Support correspondence: Support emails and related technical information may be retained while we resolve the request and for a reasonable period afterward for support, security, and recordkeeping.
You can delete individual TOTP entries and vault records in the App and can clear supported local data from Settings. Before deleting a TOTP entry, confirm that you have recovery codes or another sign-in method; deletion may otherwise cause loss of access to a third-party account.
To request access to, correction of, or deletion of information held by our services, contact us using the address below. Because Easy Auth has no developer-operated user account, we may need your installation identifier and details about the relevant event or purchase to locate a record. We may be unable to identify or retrieve data that is already aggregated, de-identified, or not reasonably linked to your request.
8. Your Choices and Rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where processing relies on consent. You may exercise applicable rights by contacting us.
You can also:
- Revoke Camera, Photos, Face ID, or Notification permissions in iOS Settings;
- Delete local records or clear local App data;
- Remove exported backups and cleaned files from the location where you saved them;
- Choose not to send a support email; and
- Uninstall the App to stop future App use and future event transmission, subject to the Keychain identifier behavior described above.
A withdrawal or deletion request does not affect processing that was lawful before the request, and some records may be retained where required by law or necessary to establish, exercise, or defend legal claims.
9. Security
We use technical and organizational safeguards appropriate to the nature of the information, including on-device encryption, iOS Keychain storage, authenticated access to sensitive local data, encrypted network transport, and access controls for service-side systems.
No method of storage or transmission is completely secure. You are responsible for protecting your device, recovery passwords, recovery codes, and exported backup files. We cannot restore a forgotten recovery password.
10. International Processing
Firebase, Apple, our service providers, and user-selected destinations may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers. Authentication secrets, saved passwords, backup contents, and selected file contents are not transferred by us as part of analytics or gateway processing.
11. Children’s Privacy
The App is not directed to children under 13 or the minimum age required by local law. We do not knowingly collect personal information from children through our services. A parent or guardian who believes that a child has provided information to us may contact us to request review or deletion.
12. Third-Party Accounts and Services
Easy Auth can generate standards-based one-time passwords for compatible third-party accounts, but it is not affiliated with, endorsed by, or sponsored by Google LLC or any other third-party account provider. Your use of a third-party account or destination remains subject to that provider’s terms and privacy policy.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, technology, service providers, or App functionality. The updated policy will show a revised effective date. Where required by law, we will provide additional notice or obtain consent before materially changing how personal information is handled.
14. Contact Us
For privacy questions, complaints, or requests, contact:
Email: hui03032026@163.com