Privacy Policy

Last updated: 25 September 2026

The essentials

FairAuth keeps your codes encrypted on your devices. There is no FairAuth account, no analytics, no tracking and no advertising, and we never receive your codes or any other data from the app. FairAuth only connects to Apple: to iCloud if you turn on iCloud Sync, and to the App Store for purchases.

Controller

BYTEPOTATO UG (haftungsbeschränkt)
c/o Daniel Ference Broek
Kurze Str. 6
37073 Göttingen
Germany
Email: contact@bytepotato.com

On your device

• Your accounts (names, setup keys, notes, images, tags) are stored encrypted (AES-256). The key is protected by the Secure Enclave of your device and can only be used after Face ID, Touch ID or your device passcode.
• Face ID and Touch ID are handled by iOS. FairAuth never receives biometric data.
• The camera is only used to read QR codes. Nothing is recorded or saved.
• Settings such as the lock time or the list view are stored on the device and contain no personal data.
• Your codes are not part of the iPhone backup: they are protected by a key that never leaves the device. That’s why FairAuth offers its own backups.

iCloud Sync (optional)

If you turn on iCloud Sync, every account is encrypted on your device before it is stored in the private iCloud database of your Apple Account. The key stays in your iCloud Keychain. Apple stores the encrypted data and processes technical information such as the number and size of entries and the time of changes; neither Apple nor we can read the contents. Apple’s privacy policy applies to iCloud. You can turn off iCloud Sync at any time and delete the data in iCloud.

Backup file (optional)

The backup file is encrypted with your backup password and saved to the place you choose, for example a USB drive or a cloud storage service. For storage with such a service, its privacy policy applies; it only receives the encrypted file.

AutoFill (optional)

If you turn on FairAuth for AutoFill in the iOS settings, the app gives iOS the website and the name of accounts that have a website, so iOS can suggest the right account. This stays on your device. Codes and setup keys are never passed on.

Import and export

Files from other apps are read on your device only. A file you export yourself leaves the device only where you send it; an export without a password contains your codes unprotected.

Purchases

The free trial and the full version are purchases through Apple’s App Store. Apple handles the payment; we receive no personal data. The purchase status is provided on your device by iOS.

Crash reports

If you turn on “Share With App Developers” in the iOS settings under “Privacy & Security” > “Analytics & Improvements”, Apple may pass anonymous crash reports and usage statistics on to us. We use them only to fix errors.

Deletion

Deleting the app removes your accounts from this device. Data in iCloud remains until you delete it in FairAuth or in the iOS settings for iCloud. Backup files stay where you saved them.

Your rights

Since FairAuth does not send personal data to us, we hold no data about you that we could disclose, correct or delete. You nevertheless have the rights under Articles 15 to 21 GDPR and the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). For questions, write to contact@bytepotato.com.