Privacy Policy

Effective date: 1 May 2026

Short version: Keya Authenticator collects no personal data. Nothing you enter or generate ever leaves your device.

1. No Data Collection

Keya Authenticator does not collect, transmit, store, or share any personal information. The app has no network entitlements and cannot connect to the internet.

2. What Stays on Your Device

The following data is stored locally on your device only:

2FA secrets — stored in the iOS Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly. They cannot be read while the screen is locked and are not included in iCloud or iTunes backups.
App settings — stored in UserDefaults (theme, sort order, lock preferences). Contains no secrets.
PIN hash — stored in the Keychain using PBKDF2-HMAC-SHA256 with 100,000 iterations. Your PIN is never stored in plaintext.

3. No Third-Party SDKs

Keya Authenticator contains no analytics, advertising, crash-reporting, or any other third-party SDK. The only system frameworks used are those provided by Apple (CryptoKit, LocalAuthentication, Security, StoreKit).

4. In-App Purchases

The optional tip jar uses Apple's StoreKit framework. Purchases are processed entirely by Apple. Keya Authenticator receives no payment details and no personally identifiable information as a result of a tip.

5. Camera & Photo Library

Camera access is requested only when you choose to scan a QR code. Photo library access is requested only when you choose to import a QR code from a saved image. Neither the camera feed nor any images are stored or transmitted.

6. Face ID / Touch ID

Biometric authentication is handled entirely by iOS. Keya Authenticator never has access to your biometric data. It only receives a boolean success/failure result from the operating system.

7. Open Source

Keya Authenticator is fully open source under the GPL v3 licence. Anyone can audit the complete source code to verify these claims.

8. Children's Privacy

Keya Authenticator does not collect any data from anyone, including children under 13. There is nothing to collect.

9. Changes to This Policy

If this policy changes, the updated version will be published at this URL with a new effective date. Given that no data is collected, material changes are unlikely.

10. Contact

Questions about this policy? Open an issue on GitHub or email KeyaAuthenticator@exx.ee.