Scope and controller
Node Excellence Limited (“Node Excellence,” “we,” “us”) is responsible for the processing described here. This policy covers our authenticator application, related customer support, and this website’s legal pages. It does not replace the policies of an app store, advertiser, or destination you choose to visit.
Authentication material stored on your device
Authenticator secrets, imported account labels, time-based verification codes, and configuration choices are intended to remain on your device. We do not require a Node Excellence product account to generate codes. Anyone with access to an unlocked device or an exported backup may be able to use that material, so device access controls are important.
Camera and QR-code import
If the application offers QR-code setup and you choose it, camera access is used to read the code you present. You can deny the permission and use another setup method when available. The scanned authentication secret is used to configure the entry locally; do not scan a code you do not trust.
Technical and support information
When you download the application, use online components, or contact us, we may receive limited technical information such as app version, device and operating-system type, language, approximate time of an event, IP address, crash details, and the content and contact details you voluntarily include in a support request. Please do not send authentication secrets or live verification codes to support.
Google advertising in relevant versions
A version that displays Google advertising may allow Google and its advertising technology to process advertising identifiers, IP address, device and app information, ad interactions, and consent choices to deliver, measure, secure, or—where law and your settings permit—personalize ads. On Apple platforms, access to the IDFA is subject to the platform’s tracking permission. Availability and controls can differ by region, age, platform, and release.
The authenticator’s local secrets and verification codes are not supplied to Google for advertising.
Why we process information
- to provide QR import, code generation, settings, and requested support;
- to maintain reliability, prevent abuse, diagnose faults, and protect the application;
- to display and measure advertising where an ad-supported version is offered; and
- to comply with applicable law and enforce our agreements.
Depending on the context, processing relies on performing a requested service, legitimate interests, consent, or legal obligations.
Disclosure and independent services
We may disclose limited information to vendors that host support or operational systems, professional advisers, authorities where legally required, and a successor in a corporate transaction. Google and app-store operators may act under their own terms for advertising, distribution, transactions, fraud prevention, or diagnostics. We do not sell your locally stored authentication secrets.
Retention
Authentication entries remain on your device until you remove them, clear application storage, or erase the device. Support correspondence and operational records are kept only as long as reasonably needed for the request, security, dispute, accounting, or legal requirements. App stores and Google retain information under their own policies. Backup copies may persist for a limited rotation period before deletion.
Your controls and privacy rights
You can manage camera and tracking permissions in device settings, adjust applicable Google ad controls, delete authenticator entries locally, and contact us about company-held support information. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, or withdraw consent without affecting earlier processing. We may verify a request before acting.
Security, backups, and recovery
We use safeguards appropriate to the information we control, but no device or transmission is completely secure. Keep recovery codes supplied by the underlying service in a separate safe place. Removing the application, losing the device, or deleting an entry can make an external account inaccessible; Node Excellence cannot recreate a third party’s authentication secret.
International processing and age
Support vendors, Google, app stores, or advisers may process information in countries with different privacy rules, subject to safeguards required by applicable law. The services are intended for users aged 17 or older. If we learn that information was provided contrary to applicable age requirements, we will take appropriate deletion steps.
Changes and contact
We may revise this policy when the application, providers, or legal requirements change. A new effective date will appear here, and material changes may receive additional notice where required. For privacy questions or requests, email [email protected]. See our Data Request Guide for practical deletion routes.