Privacy Policy
Introduction
AuthKit is provided by AS Apps Studio. This policy explains how AuthKit handles credentials, app usage information, diagnostics, and subscriptions.
Your credentials and saved items
AuthKit stores passwords, two-factor authentication secrets, passkeys, and supported secure items in Apple Keychain. Synchronizable Keychain entries can sync through iCloud Keychain when the relevant Apple services are enabled. Apple handles that synchronization; these credentials are not uploaded to an AS Apps Studio credential server.
File attachments are stored locally in the app container on the device where you added them. On iPhone and iPad, attachment writes request Apple's complete file protection. Mac storage protection depends on the device's security configuration. Attachments do not currently sync through iCloud Keychain.
AuthKit provides selected credentials to Apple's AutoFill services when you enable AutoFill and authorize a request. When you sign in to a website or app, that service receives the credentials or authentication response needed for the sign-in.
Usage information and diagnostics
AuthKit uses Google Firebase Analytics to understand app usage and improve the app. Usage information may include screen and feature interactions, import result counts, subscription interactions, app and operating-system information, language, broad categories such as the number of saved accounts, and approximate location derived from connection information. Firebase uses an app-instance identifier. Starting with iOS version 2.1.0 and macOS version 1.0.1, AuthKit disables Firebase collection of the Apple identifier for vendors (IDFV) and advertising-personalization signals.
AuthKit uses Firebase Crashlytics for crash reports and diagnostics. These reports may include technical information about the device, app version, operating system, crash stack traces, and SDK installation identifiers. Our analytics and diagnostic events are designed to exclude passwords, authentication secrets, QR payloads, saved account names, and document contents.
Firebase Remote Config downloads app configuration and uses Firebase installation identifiers, country and language codes, time zone, and technical app information to deliver those settings.
These services receive information needed to deliver their functions. Network services can also receive connection information such as IP addresses. Information is processed under the service providers' policies: Firebase privacy information and Google Privacy Policy.
Subscriptions
Apple processes App Store payments. AuthKit uses RevenueCat to manage subscription status, purchases, and restores. RevenueCat receives purchase and entitlement information, store transaction information, and an app user identifier. AuthKit also shares the Firebase app-instance identifier with RevenueCat to connect subscription reporting with product analytics. AS Apps Studio does not receive your full payment-card details. See RevenueCat's Privacy Policy and Apple's Privacy Policy.
Permissions and optional actions
Camera and photo access support QR-code import, scanning, and attachments. Biometric authentication uses Apple's authentication framework; AuthKit does not receive or store your biometric templates. You control these permissions through your device settings.
If you contact support, we receive the information you choose to send. Do not send passwords, authentication secrets, recovery codes, or private documents to support.
Exports, deletion, and recovery
JSON and CSV exports currently include passwords and two-factor authentication codes. They do not include passkeys, other secure item types, or attachments. Exported files may contain sensitive information; you control where they are saved and shared.
You can delete saved items within AuthKit. Deleting the app can remove local attachments. Apple Keychain retention and iCloud synchronization depend on your device and Apple settings, so uninstalling the app is not a guaranteed method of deleting every synced credential, and reinstalling it is not a guaranteed recovery method. Keep independent recovery methods for your accounts.
Retention and your choices
Saved credentials remain under your control in Apple Keychain until you delete them, subject to Apple's synchronization and retention behavior. Usage, diagnostic, and subscription information is retained as needed to operate, troubleshoot, and improve the app and manage purchases, subject to service-provider retention settings and applicable requirements.
You can manage permissions and iCloud settings on your Apple devices. For questions or requests concerning information handled by AS Apps Studio, contact support@asapps.studio. Some App Store transaction records are managed directly by Apple.
Children and policy changes
AuthKit is not directed to children under 13. We do not knowingly solicit personal information from children. Contact us if you believe a child has provided personal information.
We may update this policy as the app changes. Updates will be published here with a revised date.
Contact
AS Apps Studio
support@asapps.studio