Privacy Policy for AuthBuddy

Overview

AuthBuddy is a two-factor authenticator that generates TOTP and HOTP verification codes on your device. This Privacy Policy explains how AuthBuddy handles information when you use the App.

No Account, Advertising, or Tracking

AuthBuddy does not require a developer-managed account. It does not include advertising, analytics, third-party tracking, or behavioral profiling. AuthBuddy does not send your authentication accounts, setup keys, or generated codes to a Deepoke server.

Authentication Data

When you add an account, AuthBuddy may store the issuer, account name, OTP type, algorithm, digit count, period or counter, and creation or usage dates. The corresponding OTP setup secret is stored in Apple Keychain. Account metadata and secrets may use synchronizable Keychain items so Apple can make them available through iCloud Keychain when that service is available. AuthBuddy also keeps a local device cache so the App can remain usable offline.

Apple controls iCloud Keychain transport and storage under your Apple Account. Deepoke cannot access your Keychain items through a developer-managed server.

Camera and QR Codes

If you choose to scan a setup QR code, AuthBuddy uses the camera to recognize an otpauth:// code on the device. It does not record or upload camera video or scanned images. You can also enter a setup key manually or import an otpauth:// URI from the clipboard.

Face ID and Device Authentication

If you enable App Lock, AuthBuddy uses Apple’s LocalAuthentication framework to ask for Face ID or device authentication. AuthBuddy receives only the authentication result. It cannot access, store, or transmit your biometric data or device passcode.

Generated Codes, Clipboard, and Export

Verification codes are calculated locally from the stored setup secret. When you choose to copy a code, setup URI, or exported QR code, the operating system’s clipboard or share interface controls that copy. You are responsible for any copy you deliberately share with another App or person.

Data Retention and Deletion

Your account metadata, setup secrets, and local cache remain until you edit or delete them, clear all accounts in Settings, or uninstall AuthBuddy. Clearing accounts removes the associated Keychain items and local cache. Copies you deliberately export or include in an operating-system backup may remain according to the destination or backup service you choose.

Children’s Privacy

AuthBuddy does not knowingly collect personal information from children. The App has no developer-managed account and does not use authentication data for advertising or profiling.

Changes to This Policy

We may update this Privacy Policy when AuthBuddy’s data practices change or when clarification is needed. The version, effective date, and updated date shown at the top of this page identify the applicable version.

Terms of Use

Use of AuthBuddy is also subject to Apple’s Standard Licensed Application End User License Agreement.

Contact

If you have questions about this Privacy Policy or AuthBuddy’s data practices, email support@deepoke.com.