Privacy

Privacy policy

Short version: AuthentiCat collects nothing. Your accounts and secrets stay on your Mac.

What the app stores

Your 2FA secrets are stored in the macOS Keychain on your Mac. Account names, service names and display settings are stored in a file in your Mac's Application Support folder. None of this is synced to iCloud or sent anywhere.

What the app collects

Nothing. AuthentiCat has no account system, no analytics, no crash reporting and no advertising. The app contains no networking code, so it can't send your data anywhere.

Camera and screen access

AuthentiCat asks to use your camera only when you choose to scan a QR code, and stops the camera when you're done. Scanning from your screen only captures the single window you pick, once. Camera frames and screen captures are read in memory to find the QR code and are never saved or uploaded.

Exports and backups

When you export your accounts or save a backup, the file is saved where you choose. Password-protected backups are encrypted on your Mac before they're saved. An unencrypted export contains your secret keys in plain text, so store it carefully and delete it when you're done.

Clipboard

When you copy a code, AuthentiCat clears it from your clipboard after 60 seconds, unless you've copied something else in the meantime. Third-party clipboard managers may keep their own copies.

Purchases

AuthentiCat is sold through the Mac App Store. Apple handles payment under its own privacy policy. Apple gives developers aggregated sales figures and, only from people who opt in, anonymous usage statistics. I never receive your payment details.

This website

The site uses no cookies and no tracking. If you join the launch waitlist, your email address is stored by Buttondown, our email provider, and used only to tell you when AuthentiCat launches. You can unsubscribe from that email at any time, or ask me to delete your address.

Contact

Questions about privacy: support@authenticatapp.com.