Privacy Policy
Last updated: August 28, 2026
Introduction
Novaz (“we,” “us” or “our”) takes your privacy seriously. This Privacy Policy explains how we handle information when you visit authenticator.novaz.app and use Authenticator App - Novaz (the “App,” and together with our website the “Services”).
When we refer to personal data we mean any information relating to an identified or identifiable natural person. For the purposes of the GDPR, Novaz is the data controller unless otherwise stated.
Our privacy-first approach
Authenticator App - Novaz is built to collect as little about you as possible:
- No account required. You don’t create an account or give us an email address to use the App.
- Your secrets stay on your device. The 2FA secret keys and accounts you add are stored encrypted on your device. We never receive or store them.
- No advertising. The App contains no third-party advertising, and we do not build advertising profiles about you.
- We do not sell your data. We never rent or sell your personal information to anyone.
Information we process
Your 2FA accounts and secrets
When you add an account, the App stores its secret key and the codes it generates on your device, in encrypted form. This data is used on your device to generate one-time passwords and is not transmitted to us. Uninstalling the App removes it, so keep your own backups or recovery codes for each service.
Camera access
To add an account by scanning a QR code, the App uses your camera only for that purpose and only with your permission, which you can change at any time in your device settings. Images from the camera are processed on your device and are not stored or sent to us.
Contact information
If you contact us by email (for example at support@novaz.app), we receive the information you choose to include, such as your name, email address, and the contents of your message. We use this only to respond to you and provide support.
Website analytics
Our website uses Umami, a privacy-friendly, cookieless analytics tool. It records aggregate, non-identifying statistics such as page views, referring sites, approximate country, browser, and device type. It does not use cookies, does not track you across sites, and does not collect personal information that identifies you.
Payment information
The App is distributed through the Apple App Store. If any paid features or subscriptions are offered, billing is handled entirely by Apple under its own terms and privacy policy. We do not receive or store your payment card details.
How we use information
We use the limited information described above to:
- provide and maintain the Services and their core functionality;
- understand, in aggregate, how our website is used so we can improve it;
- respond to your questions, feedback, and support requests;
- protect the security of our Services and comply with applicable law.
Sharing of your information
We do not sell your personal data. We share information only in the limited circumstances described here:
- Service providers. We use Apple (App Store distribution and, if applicable, billing) and Umami (website analytics). These providers process information only as needed to perform their services.
- Legal reasons. We may disclose information if required by law, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud.
- Business transfers. If Novaz is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we will notify you of any change in how your information is handled.
Data retention
The App does not maintain accounts, and your 2FA accounts and settings are kept on your device — uninstalling the App removes them. Support correspondence is retained only as long as needed to handle your request and to comply with our legal obligations. Analytics data is aggregated and not tied to your identity.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to object to certain processing. Because we do not maintain accounts and hold very little personal data about you, for anything we do hold (such as support emails) contact us at support@novaz.app and we will help.
Security
We follow generally accepted industry standards to protect information. The App stores your 2FA secrets encrypted on your device and is designed to minimize the data leaving it. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Children’s privacy
The Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Please review this page periodically.
Contact us
If you have any questions about this Privacy Policy or our data practices, please contact us at support@novaz.app.
Trademarks
Authenticator App - Novaz is an independent app. Third-party service names, logos, and trademarks referenced in our guides are the property of their respective owners and are used for identification only; their inclusion does not imply any affiliation or endorsement. See our Credits & data sources page for attribution.