Privacy Policy

Effective Date: July 2026

At AuthSoft, we believe in making the Internet a safer and more secure place. We are committed to protecting your privacy and ensuring that your data remains securely under your control. This Privacy Policy details how the AuthSoft Authenticator mobile application and its backup services handle your information.

1. Information We Do Not Collect

Our primary goal is to ensure your privacy by design. We strictly do not collect:

• No Analytics or Tracking: The AuthSoft Authenticator app does not contain any third-party analytics, tracking, or crash reporting software.
• No Plaintext Secrets: Your TOTP (Time-Based One-Time Password) secret keys are never transmitted to our servers in plaintext.
• No Camera Data: While the app requires camera permissions to scan QR codes, this process happens entirely locally on your device. We do not transmit or store any images or video data.

2. Information We Collect

We only collect the absolute minimum data required to provide our secure sync and backup services:

• Account Information: If you choose to create an account for cloud backups, we collect your email address and an encrypted password hash to secure your account.
• Encrypted Backups: If you utilize our sync feature, we store an encrypted blob of your tokens and an Initialization Vector (IV). Note: All backup data is End-to-End Encrypted (E2EE) on your device before it is sent to our servers. We do not have the encryption keys and cannot read your tokens.

3. Local Device Security

Your authentication tokens are protected locally on your device using industry-standard security measures:

• Secure Storage: Tokens are stored in your device's native secure enclave using industry standards.
• Biometric Authentication: The app utilizes your device's native biometric sensors to lock the app locally. Your biometric data never leaves your device.

4. Third-Party Integrations

The app offers the ability to export or import tokens via Google Drive. This interaction happens directly between your device and Google's servers. AuthSoft does not intermediate or have access to these files.

5. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how your data is handled, please contact our legal team at:

legal@softrateglobal.com