Privacy Policy

1. Scope

This policy covers the Autheris iOS app and the website at autheris.app, both operated by Hunter Eddington (“I”, “me”, “the developer”). It does not cover Apple’s App Store, iCloud or CloudKit, which are governed by Apple’s own privacy policy.

2. This website

This site is a set of static files. It has no accounts, no forms, no comment system, no advertising and no analytics. It does not set cookies of its own and it does not load fonts, scripts or images from third-party networks — every asset is served from this domain.

Like any website, the hosting provider that serves these files processes standard request data (IP address, user agent, timestamp, requested path) in order to deliver the page and protect the service from abuse. That data is held by the hosting provider, is not used by me to identify visitors, and is not combined with anything else.

One convenience feature stores a preference — the light or dark appearance you choose — in your browser’s localStorage. It never leaves your device, and clearing your browser storage removes it.

3. The Autheris app

Autheris collects no personal data. Specifically:

• No account, email address, phone number or name is requested or transmitted.
• No analytics, crash reporting, advertising or attribution SDK is included.
• No usage data, device identifiers or advertising identifiers are transmitted.
• Nothing is sold, rented or shared with data brokers — there is nothing to sell.

What the app does keep is entirely local to your device:

• Your tokens and their setup keys are stored as JSON in the iOS Keychain using kSecAttrAccessibleWhenUnlockedThisDeviceOnly. They are readable only by Autheris, only while the device is unlocked, and they are excluded from iCloud Keychain and from encrypted device backups.
• Recently Deleted keeps a deleted code in the Keychain, under its own account, for up to 7 days so that a wrong tap can be undone. “Delete Now” and “Delete All” remove it immediately.
• Preferences such as Face ID lock, blur behaviour, recording protection and your sort order are stored on the device as well.

4. Optional iCloud Sync

iCloud Sync is off by default, and it is a per-device choice. It is the only feature that sends your tokens anywhere, and when it is off CloudKit is never contacted.

When you turn it on:

• Records are written to the private CloudKit database associated with your own Apple ID. That database is scoped to you; the developer cannot query it, browse it or read it.
• Labels, account names, secrets, countdown-ring colours and pin flags are written through CloudKit’s encrypted fields, so CloudKit encrypts them end to end with keys managed on your behalf. They are not visible in the CloudKit dashboard.
• Only non-secret metadata is stored as plain fields: modification timestamps, a deleted flag, a SHA-256 fingerprint used for change detection, and the algorithm, digit count and period of each code. None of those reveal a secret.
• Deleting a token replaces its record with a tombstone whose encrypted fields are cleared, so the secret does not linger in iCloud after you delete it.
• Turning sync off prompts you to either keep the codes on the device or delete the iCloud copy first. Deleting the copy also removes the codes from your other devices.

Apple processes this data as the provider of iCloud and CloudKit. See Apple’s Privacy Policy for how Apple handles it.

5. Backups you export

Autheris can write an encrypted backup file (AES-256-GCM, protected by a password you choose) or a QR code export. Those files are created only when you ask for them, and they go wherever you send them — the Files app, another device, a cloud drive you control. You are responsible for where they end up and for the strength of the password. A backup file is protected by that password and by wherever you store it; it is not protected by Autheris.

6. When the app uses the network

Autheris makes a network request in exactly two situations:

• iCloud Sync, if you have switched it on (see above).
• An optional issuer-logo lookup, which asks a small service for the brand icon of a service you are adding (for example, the name you typed). No tokens, secrets or account identifiers are sent with that request.

Everything else — generating codes, searching, locking, backups — happens offline.

7. Third-party services

• Apple — App Store distribution, iCloud/CloudKit sync (only if enabled).
• GitHub — hosts the public source code and issue tracker.
• The website’s hosting provider — serves these static pages.
• The logo-lookup service — described above, and only for issuer icons.

No other third party receives data from Autheris, because no other data leaves the app.

8. Your choices and rights

• Access and portability: everything the app holds is on your device and exportable from Settings → Backup.
• Deletion: deleting a code (or the app) removes it from your device. If you enabled iCloud Sync, use Settings → iCloud Sync → Delete Tokens from iCloud to remove the copy from your Apple ID.
• Withdraw sync: switch iCloud Sync off at any time; nothing further is uploaded from that device.
• No profiling: because no personal data is collected, there is no profile to opt out of.

9. Children

Autheris is a general-purpose security tool and is not directed at children. It does not knowingly collect any information from anyone, including children.

10. Changes to this policy

If this policy changes, the “last updated” date at the top of this page changes with it. Material changes will also be noted in the release notes for the affected version.

11. Contact