OTP Authenticator Privacy Policy
OTP Authenticator is an Android app for generating and managing one-time verification codes. This policy explains how the app handles information. It applies to the app identified by the package name com.kiteapps.otpauthenticator.
Information You Provide And How It Is Used
When you add or import an account, the app processes the account name, issuer, shared OTP secret, OTP type and settings, optional notes, category, and any mOTP PIN needed to generate codes. It also stores local preferences such as your app lock settings and a record of when a code was copied. This information is used on your device to display accounts, generate codes, organize the vault, and run the security audit. The app does not require you to create an online account.
Device Access
If you choose to scan a QR code, the app requests camera access to read it on your device. If you choose an image or backup file through the Android picker, the app reads the item you select to import accounts. Biometric unlock uses the Android biometric prompt; the app receives an authentication result, not your fingerprint or face data. The app can copy a code, URI, or export text to the Android clipboard when you request it. Clipboard contents may be visible to your device's operating system or other apps under Android's clipboard rules. The app may use vibration for touch feedback.
Local Storage And Security
Account data is kept in the app's local database and settings storage. OTP secrets and mOTP PINs are encrypted at rest with an AES-256-GCM key held in Android Keystore. Other account details, notes, usage metadata, and preferences are stored locally but are not individually encrypted by the app. If you set an app lock PIN, the app stores a salted password-derived hash, not the PIN itself. The app disables Android's automatic app backup. The app also offers optional PIN or biometric app lock, code masking, and screenshot blocking. These controls depend on your settings and device support.
Imports, Exports, And Sharing
Imports are initiated by you and processed locally. You may choose to export a password-protected encrypted vault backup, or an unencrypted JSON, otpauth URI, or CSV file. Unencrypted exports can contain your OTP secrets in readable form. You choose where exported files are saved and whether to share or copy export content; the receiving app, storage provider, or person then handles that copy under their own practices. Device-to-device QR migration and individual account QR sharing display secret data for transfer, so show those codes only to a trusted destination. The developer does not receive these exports through the app.
Network Collection And Third Parties
The current app does not request Android internet permission and has no built-in analytics, advertising SDK, or developer-operated cloud sync. The app does not transmit vault contents, camera images, or usage data to KiteApps servers. Android system components and apps you intentionally use to import, save, share, or copy data may process that data outside this app. This policy does not govern those external services.
Retention And Deletion
The app retains local vault data and settings until you delete an account, clear the app's storage, or uninstall the app. Deleting an account removes it from the app database; it does not remove earlier exports, clipboard copies, or copies shared with other apps. You can delete an account from its details screen. To remove all app-held data, clear the app's storage in Android settings or uninstall the app. Any backup file that you saved must be deleted separately from its storage location. KiteApps has no server copy to erase.
Children
The app is a general utility and is not designed specifically for children. It does not knowingly collect personal information from children through a developer service.
Changes To This Policy
If app data practices change, we will update this policy and its effective date before publishing an affected release. The current version should be available in the app and at the public URL used in the Google Play listing.
Contact
For privacy questions, contact KiteApps at poovarasan.dev@gmail.com.