Aev Authenticate privacy notice
What the Aev Authenticate desktop application keeps, where it keeps it, and what leaves your computer. Aev Authenticate is a two-factor authentication app for Windows that stores your accounts in an encrypted vault and generates one-time codes on your PC. It has no account, no sign in, no cloud sync, no telemetry, no analytics and no advertising, and it works offline.
What we collect
Nothing. Aev Authenticate makes no network connection, and your authenticator secrets, account names, codes and settings are not sent to us or to anyone else. We do not sell or share personal information, because we receive none.
What the application holds
Everything below is written to your own computer, in the application’s local data folder, unless you choose another location.
- Your authenticator vault
- Account secrets, issuer and account names, folders, notes, tags and security settings, encrypted with AES-256-GCM under a key protected by your Windows account and, if you set one, your master password.
- Automatic snapshots and recovery copies
- Encrypted copies of the vault, taken daily and before a restore so a mistake can be undone, and a preserved copy of a damaged vault file. They are encrypted in the same way as the vault.
- Preferences
- Theme, sort order, layout and window size. This file is not encrypted and contains no account information.
- Event logs
- A record of events such as the vault opening or a backup failing validation, deleted after seven days. Logs contain no secrets, codes, account names, passwords, QR contents or clipboard contents.
- Encrypted backups
- Written only where you choose to save them, encrypted with AES-256-GCM under a key derived from the backup password you set. Aev Authenticate never backs up to an online service on its own.
Camera, screen and images
The camera is used only while the Scan with camera dialog is open, to read a QR code. Frames are decoded in memory and discarded; they are never saved or transmitted. Scan QR from screen captures the screen into memory when you choose it, reads the code and discards the image. Images you import are read and discarded, and are not copied into application storage.
Clipboard
When you copy a code, Aev Authenticate places it on the Windows clipboard, asks Windows not to add it to clipboard history or cloud clipboard, and removes it after the time you choose if it is still there. Clipboard tools from other publishers may keep their own copies.
Updates and purchases
Updates, purchases and licences are handled by the Microsoft Store under Microsoft’s terms. Aev Authenticate contains no update client and does not check for updates itself.
Removing your data
Uninstalling Aev Authenticate removes its local data folder, including the vault, snapshots, preferences and logs. Encrypted backup files you saved elsewhere remain until you delete them. Keep a backup before uninstalling if you still need your accounts.
Children
Aev Authenticate is not directed at children and collects no personal information from anyone.
Your rights and who to ask
Aevornix is an operating division of Oxford Private Studios Ltd, the publisher of Aev Authenticate. Because the application keeps your data on your own computer and sends nothing to us, we hold nothing to give you access to, correct or erase. UK and EU data protection rights apply to anything we do hold, which is what you send us directly. Changes to this notice are published on this page. Write to enquiries@oxfordprivatestudios.com with a question about this notice, or to dpo@oxfordprivatestudios.com to exercise a data protection right.