OFFLINEAUTH

Privacy Policy

Last updated: 2 July 2026

OfflineAuth ("the app") is a two-factor authentication (2FA) code generator. Your privacy is simple to explain because the app is designed to keep everything on your device.

What we collect

Nothing. The app has no analytics, no advertising, no accounts, and no servers.

Data stored on your device

• The 2FA account details you add (service name, account name, and the secret key) are stored only on your device, encrypted using the Android Keystore.
• An optional PIN is stored only as a salted, hashed value. The PIN itself is never saved.

This data never leaves your device unless you choose to create an encrypted backup file, which is protected by a password that you set. You control where that file is saved.

Permissions

• Camera: used only to scan 2FA QR codes. Images are processed on-device in real time and are never stored or transmitted. You can also add accounts manually or from a saved photo without granting camera access.

Data sharing

We do not share, sell, or transmit any of your data to anyone.

Data deletion

Deleting an account inside the app, or uninstalling the app, permanently removes the stored data from your device.

Contact

For questions about this policy, contact: mehboobkhanmehvish@gmail.com