VaultOTP 隐私政策
VaultOTP 是一款纯本地离线的 2FA（双重验证）令牌管理器。本政策说明我们如何处理你的数据。
一、我们不收集任何数据
- 不收集、不上传、不共享任何个人数据或使用数据
- 无账号体系、无云端同步、无远程服务器
- 无遥测、无分析、无广告、无第三方统计或埋点 SDK
- 无需网络权限，应用全程零网络请求
二、数据存储
所有 OTP 密钥仅存储在你设备的 Keychain（系统安全存储）中，不参与 iCloud 备份与同步；令牌元数据（服务商、账号、分组等）仅存储在本机 Core Data 数据库中。
三、权限使用
- 相机：仅在你主动扫描二维码添加令牌时使用，画面不离开设备。
- 生物识别（Face ID / Touch ID / 设备密码）：用于解锁应用，仅在本机完成校验。
四、备份与导出
导入/导出使用 Aegis 官方加密备份格式（AES-256-GCM + scrypt），备份由你设置密码加密并本地生成。备份密码由你自行保管：忘记密码、设备损坏或重装系统均可能导致密钥永久丢失，开发者无法恢复。
五、第三方服务
应用内不集成任何第三方 SDK、广告或统计服务。
六、儿童隐私
本应用不收集任何数据，也无意收集儿童个人信息；不包含面向儿童的定向内容。
七、政策变更
如本政策发生变更，我们会在本页面更新并修改「更新日期」。继续使用即表示你接受更新后的政策。
八、联系我们
如有疑问，请联系：onee_dev@126.com
VaultOTP Privacy Policy
VaultOTP is a private, offline 2FA (two-factor authentication) token manager. This policy explains how we handle your data.
1. We Do Not Collect Any Data
- No personal or usage data is collected, uploaded, or shared
- No accounts, no cloud sync, no remote servers
- No telemetry, analytics, ads, or third-party tracking SDKs
- No network permission is required; the app makes zero network requests
2. Data Storage
All OTP secrets are stored only in your device's Keychain (system secure storage) and are excluded from iCloud backup and sync. Token metadata (issuer, account, groups, etc.) is stored only in the local Core Data database on your device.
3. Permissions
- Camera: Used only when you actively scan a QR code to add a token; images never leave your device.
- Biometrics (Face ID / Touch ID / device passcode): Used to unlock the app and verified only on-device.
4. Backup & Export
Import/export uses the official Aegis encrypted backup format (AES-256-GCM + scrypt). Backups are encrypted with a password you set and generated locally. The backup password is your responsibility: if you forget it, or your device is lost or the system is reinstalled, your secrets may be permanently lost and cannot be recovered by the developer.
5. Third-Party Services
No third-party SDKs, ads, or analytics services are integrated.
6. Children's Privacy
This app collects no data and does not intentionally collect personal information from children; it contains no content directed at children.
7. Policy Changes
If this policy changes, we will update this page and revise the "Last updated" date. Continued use constitutes acceptance of the updated policy.
8. Contact Us
Questions? Contact: onee_dev@126.com