Privacy Policy

Data on your devices

You do not need to create a Sign In account. Information you add to the app, such as account labels and authentication secrets, is stored on your devices. Authentication codes are generated on your device. Sign In does not need the passwords for the accounts you protect.

We do not maintain a database of your authenticator accounts or use them for advertising, tracking, or profiling. We do not sell or rent your authentication data. Optional logo retrieval shares only the request information described below.

Optional personal iCloud backup

iCloud backup is entirely optional in Sign In. When enabled, your authenticator accounts are stored in your personal iCloud Keychain and sync across your iOS devices signed into the same Apple Account. We do not store this data on our servers or have access to it. You can turn backup off at any time.

Apple operates iCloud under its own terms and Privacy Policy. iCloud availability, storage limits, security, and recovery depend on Apple’s services and your account settings. Sign In cannot access or recover your personal iCloud backup for you.

You can turn off Sign In’s optional backup. Turning it off does not necessarily delete an existing backup; manage stored copies separately through the applicable app and iCloud storage settings.

Optional service logos

Sign In can make optional, unauthenticated web requests to Logo.dev to display recognizable logos for your two-factor authentication (2FA) entries. This feature is enabled by default and can be turned off in Settings → Privacy → Download Service Logos.

The request contains the service name or domain needed to find a logo. It does not include your account name, email address, password, setup key, authentication secret, generated code, or a user-specific identifier. Requests do not use cookies or a personal login. Like any direct web request, the provider receives your IP address and request time, so these requests are not fully anonymous.

Logo.dev states that it retains request logs, including IP addresses and the requested domain or URL, as needed for service delivery, security monitoring, and billing. Its Privacy Policy explains these practices. Turning the feature off cannot withdraw information already received by the provider.

Downloaded logos are cached on your device. Turning the setting off cancels outstanding downloads, deletes downloaded logos from memory and disk, and prevents new logo requests or refreshes until you turn it back on. Your accounts and authentication codes remain available, with initials shown instead of downloaded logos.

Your logo preference is saved on your device and in your personal iCloud Keychain, independently of the authenticator-account backup switch. With iCloud Keychain enabled on devices using the same Apple Account, the preference can sync between them. Sign In checks the synced preference when you open or return to the app; Apple controls when changes arrive. Each device deletes its downloaded logos when it applies an off setting. Logo image files themselves are not synced through iCloud.

Subscriptions and advertising measurement

Apple processes Sign In Pro payments through the App Store. We use RevenueCat to report subscription purchases, trials, renewals, expirations and refunds, and to understand how our Apple Ads campaigns perform. This reporting starts automatically when you open the app and can synchronize existing purchases. There is no in-app switch to disable this reporting. RevenueCat uses a randomly generated app identifier to associate these records. We do not provide RevenueCat with your name, email address, authenticator account labels, passwords, setup secrets or generated codes.

Information processed for this reporting includes subscription product and transaction identifiers, purchase and subscription status, dates, prices and currency, country or region, and basic technical information such as app and SDK versions, operating system, platform, device model, locale and the time the app was last used or opened. RevenueCat may determine country from the request IP address when transaction country is unavailable; its documentation states that the raw IP is discarded after country is determined. Apple handles your payment details; this integration does not receive your payment-card number.

We use Apple’s standard AdServices attribution to learn whether an installation is associated with an Apple Ads campaign. The app sends Apple’s attribution token to RevenueCat, which requests available attribution information from Apple, such as campaign, ad-group and keyword identifiers. We use this information with subscription reports to evaluate our advertising. This integration does not collect Apple’s advertising identifier, IDFA, or request App Tracking Transparency permission.

RevenueCat stores subscription and attribution records for this reporting. Removing the app does not by itself delete records already held by service providers, and deleting authenticator entries is separate from subscription reporting. For questions or requests concerning reporting data, contact us using the support form. Do not send passwords, setup secrets, authentication codes or recovery codes. See RevenueCat’s Privacy Policy and Apple’s Privacy Policy for their practices.

Your control and deletion

You control the information you add to Sign In and can remove entries from the app. Review any other devices and backups where you keep copies when deleting your data. Removing the app or a local entry does not necessarily remove copies already held in a backup.

We do not hold your authentication secrets or maintain a database of your authenticator accounts, and cannot retrieve or recover them on your behalf. Keep a separate, safe copy of recovery codes provided by the services you use. Subscription and advertising measurement records are handled separately as described above.

Keeping your data secure

Protect your device passcode, Apple Account, and recovery methods, and keep your software up to date. No device or storage method is completely risk-free. Losing access to your device and backups may mean losing access to the authentication data stored in Sign In.

Apple, websites, and other services

This app-data policy does not describe data independently processed by Apple, your device’s operating system, or websites you choose to visit. Those services have their own privacy practices. Website hosting and content providers may process technical request information, such as an IP address, when delivering a webpage or its resources.

If you voluntarily contact the developer, the information you include in that communication is separate from the data stored in the app. Do not send passwords, authentication secrets, or recovery codes in a support message.

Children’s privacy

The practices described in this policy apply to all users. We do not use authentication data for advertising or profiling, including for children.

Changes to this policy

We may update this policy as the app or applicable requirements change. Updates will appear on this page with a revised effective date. We will provide additional notice or request consent where required by law.

Related terms

See our Terms of Use for the conditions that apply to using Sign In.