TGApps Global
TGApps Global - Mobile App Design & Developments
Privacy Policy

1. Introduction

This privacy policy outlines how your personal data is collected, used, and protected when you use the Secure Authenticator App for iOS. We are committed to protecting your privacy and providing transparency about how your data is managed. By using this App, you agree to the terms described here.

2. Data We Collect

We strive to minimize data collection and only gather information essential to the functioning of the App:

  • Device Information: OS version, model, and language (used for diagnostics).
  • User Support Data: Any data you share when you contact support.
  • Crash Logs: Anonymous reports for improving stability and performance.

3. 2FA Token Management

Your two-factor authentication secrets and tokens are:

  • Stored only on your device
  • Encrypted using Apple’s iOS Keychain and Secure Enclave
  • Never transmitted, shared, or stored on our servers

4. App Access Security

To ensure that only authorized users can access the app:

  • Biometric options (Face ID or Touch ID) can be enabled
  • You may set an App Lock PIN
  • Security layers are handled on-device and never transmitted

5. Optional iCloud Backup

You may opt-in to back up your 2FA data securely via iCloud:

  • Encrypted end-to-end using your Apple ID credentials
  • We have no access to iCloud encryption keys or data
  • Backups can be disabled anytime

6. Diagnostic and Performance Data

We collect limited, anonymous data solely to improve the app experience:

  • Crash reports via Firebase Crashlytics (without personal data)
  • Device OS and app version used for bug tracking
  • No behavior profiling or user tracking

7. Customer Support Communication

If you reach out for help:

  • Your name and email are stored only during the support case
  • We do not use support emails for marketing or any secondary use
  • Once resolved, the messages are permanently deleted

8. Offline First Design

The app is designed to operate completely offline unless you enable cloud features:

  • Data remains on your device by default
  • No internet connection is required for core functionality
  • Only when you enable iCloud, some encrypted data is synced

9. No Advertising or Analytics

We never collect your data for advertising purposes:

  • No ads are displayed within the app
  • No third-party analytics SDKs are used
  • No data is sold or shared with marketing partners

10. Local-Only Token Storage

All your authentication secrets are saved only on your iPhone or iPad:

  • Stored securely using iOS system-level encryption
  • We never upload your tokens to servers or external databases
  • You can export/import data manually in encrypted form

11. Encryption and Key Management

Your privacy is enforced by secure encryption and key policies:

  • Keys are generated and stored locally
  • End-to-end encryption is used where applicable (iCloud)
  • No one except you has access to your 2FA codes

12. User Control & Preferences

You are in charge of how the app behaves:

  • Manage, edit, or delete 2FA entries any time
  • Enable or disable cloud backup at will
  • Control PIN and biometric options
  • Remove the app to delete all data instantly

13. Data Retention and Deletion

We follow a strict data retention policy:

  • App data stays on your device until removed
  • Cloud backups are only kept if enabled
  • Support messages deleted after resolution
  • Crash logs removed within 90 days

14. Children’s Data

Our app is not intended for children under 13 years of age:

  • We do not knowingly collect or retain child data
  • Any reported child data is deleted immediately
  • Parents may contact us to remove data if accidentally shared

15. GDPR & International Compliance

We align with international privacy laws including GDPR, CCPA:

  • You can request a copy or deletion of your data
  • We follow data minimization and purpose limitation principles
  • All user data is stored within Apple’s infrastructure or your device

16. Security Practices

We implement industry-standard practices to keep your data safe:

  • Use of secure transport (HTTPS, TLS) where applicable
  • On-device encryption with biometric and PIN access
  • Internal audits to ensure no data leakage or misuse

17. Transparency of SDKs

We use minimal third-party SDKs:

  • Only Firebase Crashlytics is included for crash reporting
  • No SDK has access to personal or identifying information
  • We disclose all SDKs used in our documentation

18. Updates to This Policy

We may update this policy:

  • Changes will be shown in the app and on this page
  • Major changes will be announced via release notes
  • We recommend reviewing periodically

19. User Rights & Access

You can exercise rights over your data:

  • Access or correct stored data
  • Request export or deletion
  • Contact us to lodge any privacy-related concerns

20. Contact Information

If you have any privacy concerns or need help:

TGAPPS GLOBAL
Email: info@tgappsglobal.com
Address: 301-HB Trade Center, 7street,Bengaluru, India