iAuthPrivacy Policy
Scope
This policy applies to iAuth for iPhone, iPad, and Mac, provided by UL Studio (Guangzhou Panyu Huanyu Life Software Studio), and this product website. Effective date: October 25, 2026.
No developer-operated account service
Offline mode does not require registration or a developer-operated backend. iAuth includes no advertising or tracking SDK and no in-app analytics service. We do not receive your offline secrets, verification codes, account list, or saved server credentials through a developer-operated service.
Data stored on your device
Offline account secrets and saved server tokens are stored in the system Keychain. Local preferences and icon rules are stored on the device. Downloaded website icons and installed packs use local app storage. The offline vault is not synchronized through iCloud by this app.
Your own server
If you choose server mode, the app sends authentication credentials and account operations directly to the compatible server you configure. That server processes account information and generates codes according to its own policies. Passwords entered for sign-in are not retained by the client; a returned access token may be saved in the Keychain. Disconnecting removes the local connection, but does not revoke the server token or delete server accounts.
Website and remote icons
Optional icon requests go directly to the configured website or image host, which may receive your IP address and normal connection metadata. The app does not add account emails, secrets, or verification codes to website-icon requests. Backend authorization is attached only to supported same-origin server storage requests, not third-party icon hosts. You can disable website-icon downloads and clear their cache in Icon Sources.
Camera, photos, and device authentication
Camera access is used to read account QR codes. Selected QR images and custom icons are processed on the device. Device authentication is requested only for the optional locking feature. The operating system handles Face ID, Touch ID, or device passcode verification; the app does not receive biometric templates.
Clipboard and backup files
Copying puts a code on the system clipboard at your request, with expiration or clearing after about 30 seconds. Clipboard access is governed by the operating system. Exported offline backups contain secrets encrypted with your chosen password. You control where backup files are saved and shared; the app does not upload them to a developer-operated service.
Retention and deletion
Offline secrets remain in the Keychain until you delete the corresponding accounts. Remove saved connections in Settings, and manage icon caches and packs in Icon Sources. Delete exported backups separately. Keychain items may persist after uninstalling; remove sensitive records from within the app before uninstalling if you want them deleted. Remote-server data is managed through that server.
Support and website hosting
If you contact support, we receive the email and information you choose to send, and use them to answer your request. Do not send secrets or live codes. This website includes no advertising, analytics script, or tracking cookie in its source. The hosting provider may process ordinary technical request logs, such as IP addresses, for delivery, security, and service operation.
Changes and contact
We may update this policy when the app or its data practices change. The current policy and its effective date will appear here. For privacy questions or support requests, email support@saltpi.cn.