Last Updated: October 12, 2026
Plain Auth is built to be private by design. Your accounts and setup keys stay on your devices. This policy explains exactly how your information is handled.
None. Plain Auth has no account, no login, no servers of its own, and no analytics, advertising or tracking code. We never see your accounts, your setup keys or your codes.
Each account you add, including its setup key, is stored in the iOS keychain on your device, the same protected storage iOS uses for passwords. Like other keychain items, it is included in an encrypted backup of your device.
If you turn on iCloud backup and sync (Plain Auth Pro), your accounts are stored in iCloud Keychain, which Apple end to end encrypts and syncs to your other devices signed in to the same Apple Account. We cannot read them. Turning the setting off moves them back to this device only.
Plain Auth uses the camera only to read the setup QR code a website shows, using Apple frameworks on your device. No camera image is stored or sent anywhere. When you add an account from a screenshot, you pick that one picture with the iOS photo picker; Plain Auth cannot see the rest of your library.
If you turn on the lock, Face ID, Touch ID or your passcode is checked by iOS. Plain Auth only receives a yes or no answer and never has access to your face or fingerprint data.
When you copy a code, it is placed on the clipboard for one minute, marked to stay on this device so it is not shared with your other devices.
Plain Auth does not need the internet to make codes. It connects only to the App Store, to offer and verify the one time Pro purchase. Apple handles the payment; we never receive your payment details. iCloud Keychain sync, if you turn it on, is handled by iOS.
Plain Auth does not collect any personal information from anyone, including children.
If this policy changes, we will update the date above and post the revised policy here.
Questions? Email cbthrasher2020@gmail.com.