Privacy policy

The short version

Otter collects nothing, sends nothing and stores nothing outside your device. There is no account, no server, no analytics and no crash reporting. There are no in-app purchases, so there is no payment processor either. The Android release does not even hold the permission required to use the network.

What stays on your device

The two-factor accounts you add (the service name, the account name, and the key used to generate codes) are stored in an encrypted database on your phone. So are your preferences. None of it is transmitted anywhere, and it is removed when you uninstall the app.

Permissions

Otter asks for three things, each only when it needs them.

• Camera: used only while you are scanning a setup QR code, to read the code in front of you. No image is recorded or stored.
• Biometrics: used only to ask the operating system to unlock the key that decrypts your accounts. Otter never receives your fingerprint or face data; it only learns whether the device accepted you.
• Files: used only when you export or import a backup, and only for the file you choose.

Backups

If you export a backup, the resulting file is yours. Where it goes afterwards is entirely up to you, and if you place it in a cloud service then that service’s privacy policy applies to it, not this one. The file is encrypted with a passphrase you choose and cannot be opened without it.

This website

These pages are static files. There are no cookies, no analytics and no third-party scripts. Your language and appearance preferences are kept in your own browser and are never sent anywhere. The hosting provider may keep standard server logs, which are outside our control and are not used to identify anyone.

Children

Otter is not directed at children and, since it collects nothing from anyone, it collects nothing from them either.

Your rights

Under the GDPR you have the right to access, correct and erase your personal data. Since none of it ever reaches us, there is nothing for us to hand over, correct or delete: uninstalling the app removes everything Otter holds. If you would like to ask about that anyway, write to otter@foohx.com.

Changes

If this policy ever changes, the date at the top of this page changes with it. Any change that would involve collecting data would also require a new app release, which you would have to install.