We-Co Auth collects nothing. It generates your two-factor authentication codes entirely on your device. There is no account, no server, and no internet connection required — and nothing you add ever leaves your phone.
To generate your codes, We-Co Auth stores the authenticator secrets you add — by scanning a QR code or entering a setup key — along with each account’s label and issuer name. This information is:
We-Co Suite operates no server for this app and has no access to this data. Deleting the app removes it.
Camera. Used only to scan the QR code when you add an account. The image is read on-device to decode the code and is never stored or transmitted.
Biometrics & device passcode. Used only to unlock the app when you enable the app lock. Your biometric data is handled entirely by your operating system; the app never receives it.
The app is not directed at children and collects no data from anyone.
If this policy changes, the “Effective” date above is updated and the revised version is published at this address.