Privacy Policy for TwinKey

(Effective October 24, 2026)

This policy applies to the TwinKey app for iPhone and Mac (App Store) and for Android (Google Play, RuStore), and to the official website twinkey.app.

Collection and Use of Information

The application does not collect any personal information from users except for the email address which the user may provide for feedback purposes. The application uses Yandex AppMetrica to analyze crashes and usage statistics to improve the quality and functionality of the application. The official website uses Yandex.Metrica for website analytics and improving user experience. This data does not contain any personal user information and is processed in accordance with the privacy policies of the respective services.

The application may offer an optional in-app purchase to support the developer. It does not unlock any features. Payments are processed by the app store through which the application was installed; we do not receive your payment details.

Data Storage

Account data (service names, usernames, and secret keys used to generate codes) is stored only on the user's devices:

• On iPhone and Mac — in the iCloud Keychain. If the user has enabled password syncing in iCloud, the data is synchronized between the user's Apple devices through their personal iCloud account.
• On Android — in the application's private storage on the device, encrypted with a key held in the Android Keystore. The Android version does not synchronize data between devices.

The application does not send account data to the developer or to third parties.

Data Export

The user can export accounts to a .twinkey file and import them on another device. The export file is not encrypted and contains secret keys in plain form. The file is created only at the user's request; the user decides where to save or send it, and the application does not upload it anywhere. Store export files securely and delete copies you no longer need.

Security

Account data is stored using the built-in protection mechanisms of the operating system: the Keychain on iOS and macOS and the Keystore on Android. Other applications do not have access to this data. Analytics data is transmitted over an encrypted channel. One-time codes are generated on the device and do not require an internet connection.

Processing and Transmission of Data

The application does not transmit personal user data to third parties. Information collected by Yandex AppMetrica is used only for crash analysis and improving the functionality of the application in accordance with Yandex's privacy policy. Information collected by Yandex.Metrica on the website is used for traffic analysis and website improvement.

Analytics Services

The application uses Yandex AppMetrica for:

• Application stability analysis
• Collection of anonymous usage statistics
• Identification and correction of errors

The official website uses Yandex.Metrica for:

• Website traffic analysis
• User behavior study
• Improvement of website structure and content

Data Deletion

Users can delete their data associated with the TwinKey application by selecting the "Erase All" option within the application. The application does not currently provide a setting to disable analytics on any platform, and system privacy settings do not affect Yandex AppMetrica; uninstalling the application stops all data collection.

International Data Transfers

Analytics data collected by Yandex AppMetrica and Yandex.Metrica may be processed on servers located in different countries. This processing is conducted in accordance with applicable data protection laws and the privacy policies of the respective services.

Contact Us

We value the privacy and security of our users and will do everything possible to protect their data. If you have any questions or concerns, please contact us support@twinkey.app.