Privacy Policy
Last updated: August 26, 2026
Introduction
Novaz (“we,” “us” or “our”) takes your privacy seriously. This Privacy Policy explains how we handle information when you visit novaz.app and use our apps, including Authenticator App - Novaz and our other apps as they launch (together, the “Services”).
When we refer to personal data (or personal information) we mean any information relating to an identified or identifiable natural person. For the purposes of the GDPR, Novaz is the data controller unless otherwise stated.
Our privacy-first approach
Our Services are built to collect as little about you as possible:
- Your data stays on your device where possible. For example, Authenticator App - Novaz stores your two-factor authentication (2FA) secrets encrypted locally on your device. We cannot see them, we do not transmit them to our servers, and we cannot recover them for you.
- No account required. You do not need to create an account or give us an email address to use our apps.
- No advertising. Our apps do not contain third-party advertising, and we do not use advertising identifiers or build advertising profiles about you.
- We do not sell your data. We never rent or sell your personal information to anyone.
Information we process
Data stored on your device
Content you create in our apps — such as the 2FA accounts, secret keys, and labels you add to Authenticator App - Novaz — is stored locally on your device and, where you enable it, in your device’s encrypted backup (for example iCloud Keychain). This data is under your control. Only you can export or share it, and we have no access to it.
Camera and QR codes
To make setup easier, some apps can use your device’s camera to scan QR codes. Camera access is used solely to read the code on your device. We do not collect, store, or transmit images from your camera.
Contact information
If you contact us by email (for example at support@novaz.app), we receive the information you choose to include, such as your name, email address, and the contents of your message. We use this only to respond to you and provide support.
Website analytics
Our websites use Umami, a privacy-friendly, cookieless analytics tool. It records aggregate, non-identifying statistics such as page views, referring sites, approximate country, browser, and device type. It does not use cookies, does not track you across sites, and does not collect personal information that identifies you.
Payment information
Our apps are distributed through the Apple App Store. If any paid features or subscriptions are offered, billing is handled entirely by Apple under its own terms and privacy policy. We do not receive or store your payment card details.
How we use information
We use the limited information described above to:
- provide and maintain the Services and their core functionality;
- understand, in aggregate, how our websites are used so we can improve them;
- respond to your questions, feedback, and support requests;
- protect the security of our Services and comply with applicable law.
Sharing of your information
We do not sell your personal data. We share information only in the limited circumstances described here:
- Service providers. We use Apple (App Store distribution and, if applicable, billing) and Umami (website analytics). These providers process information only as needed to perform their services.
- Legal reasons. We may disclose information if required by law, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud.
- Business transfers. If Novaz is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we will notify you of any change in how your information is handled.
International data transfers
We provide our Services to users around the world. Where information is processed by our service providers, it may be transferred to and processed in countries other than your own, which may have different data-protection laws. Where this happens, we take steps to ensure your information continues to be protected.
Data retention
Because your app content is stored on your device, you control how long it is kept — deleting it in the app, or uninstalling the app, removes it. Support correspondence is retained only as long as needed to handle your request and to comply with our legal obligations. Analytics data is aggregated and not tied to your identity.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to object to certain processing. Because we do not maintain accounts and hold very little personal data about you, the most direct way to exercise these rights over app data is on your device. For anything we hold (such as support emails), contact us at support@novaz.app and we will help.
Security
We follow generally accepted industry standards to protect information. Where possible your data is encrypted on your device, and we design our apps to minimize the data leaving it. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by applicable law.
Children’s privacy
Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Please review this page periodically.
Contact us
If you have any questions about this Privacy Policy or our data practices, please contact us at support@novaz.app.