Easy Authenticator — Privacy Policy

Developer

Easy Authenticator is provided by MasoomDev. Contact: airtron68@gmail.com.

Authentication data

Account labels, TOTP secrets and app protection settings are stored locally on your device using operating-system storage and app preferences. TOTP codes are generated locally and do not require a network connection.

Backups

When you choose to export a backup, the app creates a password-encrypted file in a location you select. You are responsible for safeguarding the file and password. Importing a backup reads a file you select.

Optional cloud account and encrypted vault

If you opt in, email/password authentication is handled by Supabase. The app uploads a password-encrypted backup envelope to Supabase under your authenticated user account, along with vault revision and update metadata. The encryption master password is separate from your account sign-in password. Vault contents are encrypted on the device before upload; the cloud service does not need plaintext TOTP secrets to store the encrypted vault. Sign-in, upload and restore require internet access. A signed-in user may restore their encrypted vault on another supported device by providing the master password. Automated scheduling and recovery codes are under development and are not guaranteed available.

Biometrics

Optional biometric verification uses the device operating system. The app does not receive or store your fingerprint or face template.

Collection and sharing

The app does not implement advertising or analytics. Optional cloud registration and encrypted vault storage use Supabase. Plaintext authentication secrets are not intentionally uploaded. Opening an external policy or support link uses your browser, which may process normal connection metadata.

Deletion

You can delete accounts within the app. Uninstalling or clearing app data can remove locally stored secrets; maintain independent recovery codes and verified backups. Cloud vault deletion and account deletion requests can be directed to support. Losing the master password may make the encrypted cloud vault unrecoverable; deleting local accounts does not automatically delete an existing cloud backup.

Changes

Last updated: 26 October 2026. This policy may change if app features or data handling change.