Privacy Policy

Effective date: 2 August 2026 App: Offline Authenticator (com.hugosoftware.authenticator) Developer: Hugo Software

Short version

Offline Authenticator collects nothing and transmits nothing. There are no accounts, no analytics, no advertising, no crash reporting and no cloud sync. The app does not request the Android INTERNET permission, so it is technically incapable of sending anything anywhere — to us or to anyone else.

What we collect

Nothing. We do not collect, receive, store, sell or share any personal data.

We do not collect: your name, email address, phone number, location, contacts, photos, device identifiers, advertising identifiers, IP address, usage statistics or crash reports.

We never see your two-factor accounts, their names, or their secret keys.

Permissions

The app declares exactly one permission:

• Camera — used only while the QR scanner screen is open, so a setup QR code can be decoded in memory on your device. No photo or video frame is saved, and none is transmitted. The permission is requested at the moment you open the scanner, and you can refuse it: the app works fully by typing setup keys by hand.

The INTERNET permission is deliberately absent from the app's manifest. You can verify this on the Play Store listing under "App permissions", and the app works completely with your device in airplane mode.

Data stored on your device

Your two-factor accounts — the service name, the account label and the secret key — are stored in the app's private storage on your own device, encrypted with AES-256-GCM. The encryption key is derived with PBKDF2-SHA256 (210,000 iterations) from either:

• your PIN, if you set one — in that case the key exists only while the app is unlocked and cannot be recovered by anyone, including us; or
• a random key held on the device, if you choose not to set a PIN. The app states plainly in Settings that this protects your accounts from other apps but not from someone holding your unlocked phone.

Android's cloud backup and device-to-device transfer are switched off for this app, so your encrypted vault is never copied to Google's servers or to another handset behind your back.

You can delete everything at any time by removing accounts in the app, clearing the app's data in Android Settings, or uninstalling the app.

Backups you create

The only way data leaves the app is when you ask for it. Creating a backup produces a single file, encrypted with a password you choose, and hands it to the standard Android share sheet. You decide where it goes — your own cloud drive, your password manager, a cable, a message to yourself. The app has no visibility into that destination and no ability to reach it.

If you lose that backup password, the file cannot be decrypted by us or by anyone else. There is no recovery mechanism, by design.

Clipboard

When you tap a code, the six-to-eight digit code is copied to your device's clipboard so you can paste it into the site that asked for it. That is the only information the app ever hands to the rest of your system. Other apps on your device may be able to read the clipboard; this is true of every app that copies text, and it is why the code expires within seconds.

Third parties

The app contains no third-party SDKs for analytics, advertising, attribution or crash reporting. There are no ad networks. There is no payment processing, because the app is free and contains no purchases of any kind.

Children

The app is a utility that collects no data from anyone, and therefore collects no data from children. It complies with the Children's Online Privacy Protection Act (COPPA) and the Google Play Families policy by virtue of collecting nothing.

Your rights

Privacy laws such as the GDPR and the CCPA give you rights to access, correct, export and delete personal data held about you. We hold no personal data about you, so there is nothing for us to produce or erase. If you would like written confirmation of this, contact us and we will provide it.

Changes to this policy

If a future version of the app changes how it handles data, this page will be updated before that version is released, and the effective date above will change.

Contact

Questions about this policy: [email protected]