Privacy Policy

This Privacy Policy explains how Smauth ("we," "us," or "our") handles information when you use the Smauth app or visit this website. Our goal is simple: the authenticator should work without requiring us to collect your account secrets.

1. Information in the app

OTP account names, issuers, secrets, generated codes, groups, and app preferences are designed to be stored locally on your device. We do not receive or inspect these values as part of normal app operation. App lock data is handled through your device's secure capabilities where available.

2. Backups you choose to create

If you export, import, or sync a backup, the resulting file or data is handled by the destination you select, such as your device storage, Google Drive, or a WebDAV provider. We do not control those providers. Encrypted backups are protected by the password or mechanism you choose; losing that protection may make a backup unrecoverable.

3. Website and waitlist

If you join our waitlist, we collect the email address you submit and use it to communicate about Smauth's availability and material product updates. We retain it only for as long as reasonably necessary for that purpose or until you ask us to delete it. The waitlist form sends your email to our configured Google Apps Script endpoint, which records a timestamp and email address in a private Google Sheet. Google may process this information as a service provider under its own terms and privacy policy.

4. Diagnostics and technical data

We may receive limited technical information needed to operate, secure, and improve the service, such as app version, operating-system version, and crash or error information, if diagnostic collection is enabled in the release you use. We do not use this information to collect OTP secrets. We will update this policy if we introduce analytics or advertising.

5. Sharing

We do not sell your personal information. We may share limited information with service providers that help us host the website, send waitlist email, or process diagnostics. They may process information only to provide those services and under appropriate contractual obligations. We may also disclose information where required by law or to protect rights, safety, and service integrity.

6. Your choices and rights

You can request access to, correction of, or deletion of waitlist information by contacting us. You can unsubscribe from non-essential email using the link in the message or by contacting us. You can remove locally stored app data by deleting accounts, clearing app data, or uninstalling the app, but external backups must be deleted from their own storage locations.

7. Children

Smauth is not directed to children under the age required by applicable law, and we do not knowingly collect personal information from them.

8. Changes and contact

We may update this policy as Smauth develops. The “Last updated” date shows when changes were made. For privacy questions or requests, contact smauth@sume.uk. This draft should be reviewed and adapted to the legal requirements of the regions where Smauth is offered.