Privacy Policy

Your privacy is the foundation of 2FA Vault.

Last updated: August 2026

Data We Collect

By default, 2FA Vault collects no usage data. Your vault contents — every code, account, and secret — never leave your device. The app makes a small number of network requests for licensing and support (below), and only sends anonymous usage statistics if you opt in.

Licensing & Support Requests

To issue and verify a Pro license, the app registers an anonymous device identifier with our server and checks license status. The optional Pro purchase is processed by Polar, our payment processor. If you send feedback, your message is delivered to us by email. None of these requests ever include vault contents.

Optional Usage Analytics

If you choose to help improve 2FA Vault, the app sends anonymous statistics — app unlocked, Pro page viewed, checkout started — tied only to an anonymous license identifier, never to your identity or your vault. These are stored on our own infrastructure, are off by default, and you can turn them off at any time in Settings.

How Your Data Is Stored

Your 2FA accounts and secrets are stored in an encrypted vault file on your computer. The vault is encrypted with AES-256-GCM using a key derived from your master password.

The vault never leaves your device unless you explicitly copy it yourself.

Camera Access

2FA Vault requests camera access to scan QR codes when adding new accounts. Camera data is processed locally in real time and is never stored or transmitted.

Screen Recording Access

2FA Vault can detect a QR code shown anywhere on your screen when you add an account. On macOS this uses the screen recording permission. Screen contents are analyzed locally, only while you are adding an account, and are never recorded or transmitted.

Import & Backup Files

Importing from another app and creating or restoring an encrypted backup all happen entirely on your device. You choose the files, and nothing is uploaded — encrypted backups are protected by a password you set.

Third-Party Services

2FA Vault uses no advertising networks, no analytics SDKs, and no third-party tracking services. The only third parties involved are Polar (payment processing for the optional Pro purchase, under its own privacy policy) and Resend (delivering feedback emails you choose to send). Optional usage statistics are stored on our own infrastructure — not a third-party analytics service.

Children's Privacy

2FA Vault does not knowingly collect personal data from children under 13. If you opt in, usage statistics are anonymous and contain no personal information.

Changes to This Policy

If we update this privacy policy, we will post the updated version here with a new effective date.

Contact

Questions about privacy? Email us at [email protected].