Skip to main content

Privacy Policy

ZTXBAS Authenticator

Last updated: 2026-06-01

Introduction​

This Privacy Policy describes how ZTXBAS Authenticator ("we", "our", or "the App") handles information when you use our mobile application. We are committed to protecting your privacy and being transparent about our data practices.

Information We Collect​

Currently Collected Data​

We do not collect any personal data. The App operates entirely on your device and does not transmit personal information to external servers.

The App stores the following data locally on your device only:

  • Enrollment Token: A unique identifier used to authenticate your device with your organization's authentication server
  • Biometric Configuration: Technical information about your device's biometric capabilities (not your actual biometric data)
  • App Preferences: Your local app settings

This data never leaves your device and is stored securely using your device's encrypted storage.

Biometric Data​

The App uses your device's biometric authentication (fingerprint, face recognition) to verify your identity. We do not collect, store, or have access to your biometric data. All biometric processing is handled entirely by your device's operating system.

Future Data Collection​

In future versions, the App may collect:

  • Location Data: We may collect your device's location to provide location-based security features or to verify authentication requests. If implemented, this feature will be optional and will require your explicit consent before any location data is collected.

We will update this Privacy Policy before implementing any new data collection and will notify you of such changes.

How We Use Information​

The locally stored data is used solely to:

  • Authenticate your device with your organization's authentication server
  • Process authentication requests
  • Maintain your enrollment status

Data Sharing​

We do not sell, trade, or share your personal information with third parties.

The App communicates only with your organization's authentication server to process authentication requests. This communication includes only:

  • Your enrollment token
  • Authentication responses (approve/deny)

Data Security​

We implement appropriate security measures to protect your information:

  • All local data is stored using your device's secure encrypted storage
  • Biometric authentication is required to approve authentication requests
  • Communication with authentication servers uses secure protocols

Data Retention​

Local data remains on your device until you:

  • Unenroll from the App
  • Uninstall the App
  • Clear the App's data

Your Rights​

You have the right to:

  • Access: View what data is stored locally in the App
  • Delete: Remove all stored data by unenrolling or uninstalling the App
  • Withdraw Consent: Disable biometric authentication in your device settings

Children's Privacy​

The App is not intended for use by children under 13 years of age. We do not knowingly collect information from children.

Changes to This Policy​

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically.

Contact​

For questions about Privacy Policy, contact:

support@corezt.com

By using ZTXBAS Authenticator, you agree to this Privacy Policy.