In short: we collect nothing. Your two-factor secrets stay in your devices’ secure storage and move only between your own paired devices. We never see them, and there is no server that could.
AuthWright (App Store and Google Play: com.blazingpepper.authwright) is published on the App Store (Mac, iPhone, iPad, Apple Watch) and Google Play (Android, Wear OS) by Blazing Pepper Productions LLC, 3400 Cottage Way Ste G236814, Sacramento, CA 95825-1474, United States.
On both stores the developer is listed as Jonathan Dale. Questions about this
policy can go to support@blazing-pepper.com or jonathan.dale@blazing-pepper.com. This page covers AuthWright on its own; our
privacy overview covers everything we publish.
What we collect
Nothing. AuthWright does not ask for your name, email address, location, contacts, or any other personal information. We run no servers and no accounts, and the app contains no analytics, advertising, crash reporting or tracking of any kind.
What stays on your device
Your two-factor secrets, in the Keychain (Apple) or the Keystore (Android), and the names, groups and settings that go with them in the app’s private storage. Service logos are built into the app and never fetched online. It stays on your device, is never sent to us, and is removed when you uninstall the app.
What leaves your device
- To your own paired devices, over your local network: after you compare a code on both screens, your accounts sync directly between them, encrypted, with no server in between. A removal on one device never deletes an account elsewhere without asking.
- To your Apple Watch or Wear OS watch: your time-based accounts, sent from your phone through Apple’s or Google’s watch connection.
- One request to apple.com, to read the time from its reply and warn you if your device’s clock is wrong enough to spoil codes. Nothing about you is in the request; like any website, Apple sees the network address it comes from.
- Backups, only where you save them: encrypted with a passphrase only you know.
On Android
Scanning a QR code uses Google Play services’ code scanner and ML Kit, which run on your device: the app receives only the decoded code, never the camera image, and needs no camera permission. Watch sync uses Google Play services. Both are Google’s software, under Google’s Privacy Policy.
Permissions
- Camera (iPhone and iPad) — only to scan setup QR codes.
- Screen recording (Mac) — only when you ask it to scan a QR code off your screen.
- Face ID, Touch ID or your device’s lock — for the optional app lock, and before Shortcuts or Siri can copy a code.
- Local network — to find and sync with your own paired devices.
- AutoFill — to offer codes to websites, if you turn it on.
- Files you choose — to import exports from other authenticators, and to save and restore backups.
Buying it, and what the stores say
It is a paid app, bought once from the store; it carries no ads and no in-app purchases. The purchase is handled entirely by Apple or Google, and we receive no payment details or personal information from it.
On the App Store its privacy label reads “Data Not Collected”. On Google Play its Data safety section says it collects and shares no data. Both say the same as this page; if you think a store listing and this page disagree, tell us and we will fix whichever is wrong.
Children
AuthWright is a security tool for anyone who uses two-factor sign-in. It collects no personal information from anyone, including children under 13.
Deleting your data
We hold no data about you, so there is nothing for us to delete on request. To remove what AuthWright stored:
- Delete accounts in the app, or uninstall it, to remove them from that device. Paired devices ask before removing their own copy.
- Delete any backup files you saved, wherever you saved them.
Changes to this policy
If this policy changes, the revised version will be posted at this address with a new effective date.
Contact
support@blazing-pepper.com or jonathan.dale@blazing-pepper.com, or the support form — Blazing Pepper Productions LLC, 3400 Cottage Way Ste G236814, Sacramento, CA 95825-1474, United States.