Our promise
TOTPLY has no account system and no cloud database for your app data. Your authenticator secrets, one-time codes, passwords, usernames, notes, website addresses, labels, and categories stay locally on your device. They are never uploaded to or stored by TOTPLY.
Information you add
When you add an account or credential, TOTPLY processes it only on your device so the app can generate codes and display the information you saved. We cannot view, retrieve, sell, share, or use this content for advertising because it is never sent to us.
Device permissions
Camera access is used only when you choose to scan a QR code. Photo-library access is used only when you choose an image to import. Face ID or device authentication is handled by your operating system; TOTPLY receives only the result of the authentication request and does not receive or store biometric data.
Local storage only
Your vault is stored locally and protected by the security features available on your device. TOTPLY does not operate a server that receives or stores your vault. Any device backup or transfer is controlled by your device and its operating-system settings, not by TOTPLY.
No analytics or tracking
TOTPLY does not collect analytics, usage histories, advertising identifiers, crash reports, or telemetry from the app. We do not track which accounts you add, which codes you view, or how you use the app.
Retention and deletion
Your information remains on your device until you remove it, reset the app, or delete the app and its local data. Because TOTPLY does not store a copy, we cannot recover deleted information. Your device provider may retain device backups according to the settings and policies you choose with that provider.
Sharing
TOTPLY does not receive your app data, so we cannot sell or share it. The App Store may independently process purchase or download information under its own privacy policy. If you contact support, only the message and contact details you voluntarily send are received.
Children
TOTPLY is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information through a support request, contact us so it can be removed.
Your choices
You can remove accounts and passwords inside the app, disable camera or photo access in device settings, and delete the app’s local data. Before deleting or moving data, export or save recovery information where the relevant service permits it.
Changes and contact
We may revise this policy as TOTPLY evolves. The updated date above will change when a revision is published. Questions or privacy requests can be sent through the contact option on the Support page.