Privacy policy

There is no OpenFactor account, no OpenFactor server, and no analytics, crash reporting, or telemetry of any kind. The app makes no network requests of its own. This is checked automatically: continuous integration searches every source file for networking and logging code and fails the build if any appears.

What is stored, and where

Your accounts and their secrets are stored on your devices, encrypted, in the iOS Keychain. The key that decrypts them is held in the app's private container on each device. It is never synced, never written to the Keychain, and never included in a device backup.

Your preferences, meaning sort order, appearance, chosen icon, whether sync is on, and the app lock settings, are stored on the device. They never include an account name or a secret.

iCloud

iCloud sync is off until you turn it on. When it is on, your encrypted accounts are offered to iCloud Keychain, which is Apple's service and is end to end encrypted. OpenFactor does not operate it and cannot read what it carries. Apple's own privacy policy governs it.

Turning sync off stops offering new changes to iCloud Keychain and returns the accounts on that device to device only protection.

Sharing

Nothing is shared with anyone. There are no third party libraries in this app, so no other company's code runs inside it.

When you export a backup, that file is yours and goes wherever you send it. When you import one, it is read on the device.

Children

The app collects no data from anyone, including children.

Contact

OpenFactor is published by ReVeNG System. Questions and reports: the project's issues page.

Security vulnerabilities: see SECURITY.md in the repository, which asks for private disclosure through GitHub Security Advisories.

Changes

This policy is versioned with the source. Its history is visible in the repository.