Privacy Policy

Securo: 2FA Authenticator ("Securo" or "the App") shows two-factor authentication codes on iPhone, iPad and Mac. It is made by Claudiu Sararu ("I", "me"), an independent developer. This policy explains what happens to your information when you use it.

1. Information I Collect

None. Securo does not ask you to create an account, sign in, or give an email address, name or phone number. It contains no analytics, crash-reporting, advertising or tracking code from me or from anyone else, and it has no third-party libraries of any kind.

The two-factor accounts you add (the service name, the account label, the secret key and its settings), your folders and your preferences are stored on your devices and in your own iCloud account, as described below. None of it is sent to me.

2. Where Your Data Lives

On your device

Your accounts are kept in the App's private storage on your device. Every secret key is encrypted with AES-GCM before it is written to disk. The key that unlocks them is stored in your device's Keychain.

In your iCloud, if sync is on

To keep your iPhone, iPad and Mac in step, Securo uses Apple's CloudKit to store your accounts in the private database of your own iCloud account. Secrets are encrypted on your device before they are uploaded. The key that decrypts them travels between your devices through iCloud Keychain, which Apple protects with end-to-end encryption. As the developer I have no access to anything in your private iCloud database. Apple's design does not allow it.

You can turn sync off at any time in Securo's Settings. Your accounts then stay only on the device you are using.

What you export

Securo can export your accounts as an encrypted backup file protected by a password you choose, as migration QR codes, or as plain text. Exports only happen when you ask for one, and they go only where you send them. Plain-text exports and QR codes are not encrypted, and the App warns you before it creates them. Once a file leaves the App, keeping it safe is up to you.

3. Apple Services the App Uses

Securo talks to nothing but Apple:

• iCloud (CloudKit and iCloud Keychain), to sync your accounts between your own devices when sync is on.
• The App Store (StoreKit), to sell and restore the one-time Unlimited purchase. Apple processes the payment; the App only learns whether the purchase exists. I never receive your payment details.

Issuer icons are built into the App; none are downloaded. The App makes no other network connections.

If you have chosen to share analytics with app developers in your device's settings, Apple may send me anonymous crash reports and usage statistics about the App. They do not identify you, and I do not receive them from anywhere else.

4. Device Permissions

Securo only asks for a permission when you use the feature that needs it. Everything else works without it.

• Camera (iPhone and iPad): to scan a QR code when you add an account. The camera image is read on your device to find the code and is never saved or sent anywhere.
• Face ID, Touch ID or your passcode: only if you turn on the optional lock. The check is done by your device; the App only learns whether it succeeded.
• Screen Recording (Mac): only for "Scan Screen for QR Code". macOS shows its own picker so you choose exactly what is shared, and the image is used once, in memory, to read the QR code, then discarded. Nothing is saved or sent.
• Photos and Files: when you choose an image or a file to import, the App reads only the item you picked.
• Clipboard: when you copy a code, it goes to the system clipboard like any other copied text, and stays there until something else replaces it. If you use Universal Clipboard, your devices may pass it between themselves. The App only reads the clipboard when you ask it to paste a link or a QR image.

5. Data I Do Not Collect

• Names, email addresses, phone numbers or any contact details.
• Your two-factor accounts, secret keys or codes.
• Location, contacts, photos or files.
• Device identifiers or the advertising identifier (IDFA).
• Usage analytics, browsing history or search history.
• Payment information.

6. Children's Privacy

Securo is rated 4+ and is not directed at children. It collects no personal information from anyone, children included.

7. Your Rights Under GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR gives you rights over personal data held about you: access, correction, deletion, restriction, portability and objection. Because I do not collect or process any personal data through Securo, there is nothing I hold that these rights could apply to. Your data is fully under your control on your own devices and in your own iCloud account, and you can export it or delete it from the App at any time.

8. Your Rights Under CCPA / CPRA

If you are a California resident: I do not collect, sell or share personal information, and I do not use it for targeted advertising.

9. Retention and Deletion

• When you delete an account, it moves to Recently Deleted for 30 days so you can restore it, then it is removed for good. You can also remove it from Recently Deleted straight away.
• With sync on, deleting an account removes it from your iCloud and your other devices too.
• Deleting the App removes everything it stored on that device. Your iCloud copy stays until you delete your accounts in the App on another device, or remove Securo's data in your device's iCloud storage settings.

10. Security

Secret keys are encrypted with AES-GCM on your device, and the encryption key is kept in the Keychain and synced only through iCloud Keychain. You can add a Face ID, Touch ID or passcode lock, and hide codes until you tap them. No system is perfectly secure, so please also keep the recovery codes each service gives you when you turn on two-factor authentication.

11. Changes to This Policy

If this policy changes, I will update this page and the date at the top. If a change ever meant the App would collect data, I would say so in the App before it happened.

12. Contact

Claudiu Sararu
Email: claudiu.sararu@gmail.com

13. App Store Privacy Declaration

On the App Store, Securo's privacy label reads Data Not Collected, and the App does not track you.