Privacy Policy
User Privacy Agreement
Welcome to LazyCoffee TOTP. Please read and agree to the following privacy policy before using this app:
You must agree to the privacy policy to use this app.
Data Collection Notice
This app is a fully offline TOTP authenticator. We value and protect your privacy.
Operator Information
- Company Name: Dongguan LazyCoffee Software Development Co., Ltd.
- Registered Address: Dongguan City, Guangdong Province
- Data Protection Officer Contact: support@lazycoffee.com
Information Security Measures
- Identity Authentication: The app uses locally stored keys to verify user identity and supports biometric authentication (fingerprint/face) for app unlocking.
- Data Encryption: All TOTP keys and configuration information are encrypted using the industry-standard AES-256-GCM algorithm, with keys stored in the system-level secure area (KeyStore/Keychain).
- Access Control: The app supports setting a startup password and biometric authentication to prevent unauthorized access.
- Malicious Code Prevention: The app undergoes strict security scanning before release to ensure no malicious code.
- Security Audit: We regularly conduct security audits and assessments of the app to ensure the effectiveness of privacy policies and security measures.
Sensor Data Usage
Collection Purpose
This app uses device sensor data (including but not limited to accelerometer, gyroscope, gravity sensor, magnetometer) only for the following explicit purposes:
- Detecting device orientation changes (landscape, portrait) to optimize interface display and layout adaptation
- Recognizing gesture operations (shake, tilt) to enhance user interaction experience and operation convenience
Collection Scope
Sensor data (X/Y/Z axis values, orientation angle information) is only temporarily read when the app is in foreground, not persistently stored, not uploaded to any server, and immediately released after app exits.
Usage Method
Sensor data is automatically collected and processed by the React Native framework (version 0.76.5) through system APIs, temporarily stored only in app memory for interface rendering and user interaction optimization. All data processing is completed locally on your device without network transmission.
App Permissions Usage Explanation
This app legally requests the following system permissions for the purposes described below:
- Camera Permission: Used for scanning TOTP QR codes. Android: android.permission.CAMERA | iOS: NSCameraUsageDescription. Only requested and used when you actively click the 'Scan QR Code' button, not accessed in background.
- Biometric Authentication: Used for app unlock feature. Android: USE_BIOMETRIC/USE_FINGERPRINT | iOS: Face ID/Touch ID (NSFaceIDUsageDescription). Optional feature that must be manually enabled in settings, not enabled by default.
- Storage/File Access: Used for importing and exporting encrypted backup files. Android: READ/WRITE_EXTERNAL_STORAGE | iOS: File system access via native APIs. Only used when you actively perform import/export operations.
- Haptic Feedback: Used for haptic feedback in scenarios such as button clicks and successful operations. Available on both Android and iOS platforms.
Data Storage
All TOTP configurations and code generation happen locally on your device and are never uploaded to any server. All sensitive data is protected using encrypted storage technology (MMKV).
Privacy Commitment
- No collection of personal identity information
- No connection to any remote servers
- No third-party tracking or analytics tools
- Sensor data is not stored or uploaded, only used for UI optimization
Third-Party SDK Usage Information
React Native Framework (Core SDK)
SDK Name: React Native Framework v0.76.5
SDK Provider: Meta Platforms, Inc.
Collection Purpose: This app is built on the React Native framework, which automatically accesses device sensors (accelerometer, gyroscope, gravity sensor, magnetometer) during app startup and runtime to support: (1) gesture operation recognition; (2) automatic screen orientation detection and rotation; (3) interface animation rendering.
Collection Method: Automatically collects sensor raw data through native system APIs (Android: SensorManager | iOS: CoreMotion framework).
Collection Scope: Sensor value data (X/Y/Z axis acceleration, angular velocity, magnetic field intensity), collection frequency dynamically adjusted based on system performance (typically 60Hz).
Data Processing: All data is temporarily processed only in app process memory for calculating device posture and gestures, not written to local storage, not uploaded via network, automatically cleared when app closes.
Contact Us
If you have any questions about our privacy policy, please contact: support@lazycoffee.com
Last Updated: December 2025