1. About this policy
This Privacy Policy explains how 2FA - Protect Your Data (the “App”) handles information when you use its authenticator and Secret Album features, visit 2fa-protect.com, or contact support. “We,” “us,” and “our” refer to the developer of the App. Our privacy contact is support@2fa-protect.com. This policy covers the App and our support interactions; Apple and any services whose accounts you add have their own privacy policies.
We believe information used to protect your accounts and personal media should remain under your control. The developer does not sell, rent, or share your authenticator contents or Secret Album contents with advertisers, data brokers, or other third parties. The limited Apple refund procedure described below is a separate exception for purchase and usage information only.
2. Authenticator information
When you add an account, the App processes the setup key, account label, and related settings needed to generate authentication codes. These are used on your device to provide the authenticator feature, not to give the developer access to the accounts you protect. The developer does not receive your setup keys or generated codes as part of normal App use.
An account label may contain an email address or username you enter. Treat it as personal information and keep your device secure. Adding an account to the App does not create an account with us, transfer control of that account to us, or authorize us to sign in on your behalf.
3. Secret Album contents
The Secret Album processes the photos and videos you choose to add so you can organize and view them within the App. The developer does not receive, inspect, sell, or distribute those media files through ordinary use of the album. You decide which items to import and which items to remove using the controls available in your version of the App.
Importing media does not automatically remove the original file from your device’s Photos library, Recently Deleted folder, shared albums, or existing cloud backups. Copies outside the App remain subject to the settings and policies of the services holding them. Review those locations separately if you want to remove an original or a backup.
4. Camera and photo permissions
The App may request camera access when you choose to scan a two-factor setup QR code, and photo-library access when you choose media for the Secret Album. Access is requested through iOS and is used for the feature you invoke. Where iOS offers limited photo access, you can choose only the items you want to make available.
You can review and change permissions in your device’s Settings. Declining camera permission may prevent scanning, while manual key entry remains an alternative where offered. Declining photo access may limit importing media. Changing a permission does not by itself erase content already imported into the App.
5. Purchases and subscription information
Apple processes App Store payments and manages the payment details associated with your Apple Account. We do not receive your full card number or banking credentials from Apple. Purchase records and subscription entitlement information may be processed as needed to recognize a purchase, restore eligible access, and determine whether paid features are available.
Such information can include a product identifier, transaction identifier, purchase date, renewal status, and expiration or refund status. We use purchase information for delivering and administering purchased access, not for advertising or selling information about your activity. Apple’s handling of billing information is governed by Apple’s privacy policy and applicable store terms.
6. Refund requests and Apple consumption information
If you ask Apple for a refund of an in-app purchase, we may provide Apple with limited information about use of the purchased service to help Apple assess that request, where this process is implemented and applicable. The information may include app usage time, an anonymous account identifier, the total amount spent, and the total amount refunded, but only to the extent available and relevant.
We follow applicable law and Apple’s current requirements, including obtaining consent where required before sending consumption information. Acceptance of this policy is not a substitute for any separate consent required by Apple or law. No authenticator setup keys, verification codes, passwords, Secret Album photos, or videos are included in this refund response. Apple makes the refund decision. An anonymous identifier may still distinguish transactions or activity associated with the same user, so it should not be understood as a guarantee that the information is impossible to link.
7. Information you send to support
If you email support@2fa-protect.com, we receive your email address, the content of your message, and any attachments you choose to send. We use this information to understand your request, reply, and resolve the issue. You may choose to provide an app version, device model, or iOS version when those details help diagnose a problem.
Please do not send passwords, one-time codes, setup keys, recovery codes, or private media. Remove unrelated personal information from any screenshot before sharing it. We do not require access to your protected accounts or personal album to answer general support questions. Email delivery necessarily involves the email services used by you and by us.
8. Website information
The supplied landing pages do not use advertising scripts, tracking pixels, analytics scripts, embedded third-party fonts, or cookies. Opening a support email link uses your chosen email application. Following an external link, including a link to Apple, takes you to a separate service with its own privacy practices.
When this website is hosted, its hosting provider may process basic connection information such as an IP address, request time, requested page, and browser information to deliver pages and maintain security. Any hosting logs and their retention depend on the deployed hosting configuration. This website does not request access to your authenticator or Secret Album.
9. Purposes and legal grounds
We process information to deliver the features you request, administer eligible purchases, respond to support inquiries, and meet applicable obligations. Where a legal basis is required, processing may rely on performing a contract with you, complying with a legal obligation, or a legitimate interest such as responding to a support request and maintaining service security, subject to your rights.
Where consent is required, including a required consent for Apple consumption-information disclosures, we rely on that consent and honor applicable withdrawal rights. Device permission prompts control access to protected iOS resources. We do not treat a device permission as general permission to use information for unrelated purposes.
10. Disclosure and no sale of personal content
We do not sell personal information or provide your authenticator or Secret Album content to third parties for marketing, profiling, or advertising. Apart from the specifically described Apple purchase/refund process and the services necessary for email and website delivery, we do not voluntarily disclose your personal information to unrelated parties.
If a valid legal obligation requires disclosure of information we actually hold, we will respond only as required by law. We cannot disclose device-only authenticator secrets or media that we do not possess. Information you independently share with an external service is governed by your relationship with that service.
11. Storage, backups, and international processing
Authenticator and Secret Album content used locally remains on your device through ordinary App use. Device-level backups, device transfers, or Apple services you enable may create additional copies under your own settings. Do not assume that the App provides a separate recovery service or a developer-managed backup of local content.
Apple, website hosting, and email services may process the limited information they handle in countries other than your own. Where applicable law requires safeguards for a transfer made by us, we use the safeguards required by that law. You can contact us with questions about a particular support interaction or transfer.
12. Retention and deletion
Local content remains available until you remove it, delete the App’s local data, or otherwise change the device storage holding it. Deleting the App may permanently remove local information; it does not necessarily erase copies in Photos, backups, or other services. Before deleting anything, confirm you can still access each protected account through a recovery method.
Support correspondence is kept only for as long as reasonably needed to resolve requests, maintain necessary support records, and meet applicable legal requirements. Purchase or refund records, if held, are kept only as needed for entitlement administration, dispute handling, or legal obligations. You may ask us about retention or request deletion of information we hold. We explain any legal reason that prevents us from fulfilling a valid deletion request.
13. Security and your choices
We limit use of information to the purposes described in this policy and take reasonable measures appropriate to information we actually hold. No device, software product, or communication method can provide absolute protection. We do not promise a particular encryption architecture or protection against every form of unauthorized access.
Protect your device with an appropriate passcode, keep iOS and the App updated, and avoid sharing setup keys or recovery codes. A lost device, deleted local data, or forgotten access credentials can affect account and media access. Keep independent recovery methods where the account provider offers them.
14. Your privacy rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also have a right to withdraw consent without affecting the lawfulness of processing before withdrawal. Where applicable, you may complain to your local data-protection authority and exercise your rights without unlawful discrimination.
Send requests to support@2fa-protect.com. We may ask for proportionate information to verify that a request concerns you, but will not ask you to disclose your authenticator secrets. Our ability to act is limited to information we actually control; requests about Apple billing data or device backups may need to be directed to Apple.
15. Children and age requirements
The App is not directed to children below the minimum age required to consent to relevant data processing in their location. Where a minor may lawfully use the App, a parent or guardian should supervise purchases and account security as appropriate. We do not knowingly solicit children’s personal information for marketing.
If you believe a child has sent us personal information without a required authorization, contact support@2fa-protect.com. We will review the request and take appropriate steps concerning information we hold, consistent with applicable law.
16. Policy updates and contact
We may update this policy to reflect changes to the App, our practices, or applicable requirements. The date at the top identifies the latest revision. We will provide additional notice or seek consent when required for a material change. A policy update does not authorize retroactive use of your information for an incompatible purpose without the required legal basis.
For privacy questions, support requests, or rights requests, contact the developer of 2FA - Protect Your Data at support@2fa-protect.com. Please identify the nature of your request without including private authentication material or album contents.
Need clarification? Contact support.
Back to top ↑