TourID · ITechPro

Privacy Policy

This policy explains how ITechPro collects, uses, stores, and protects information when you use the TourID authenticator app on Android and iOS.

App: TourID Company: ITechPro Effective date: August 22, 2026

1. Who we are

TourID is a mobile authenticator application provided by ITechPro (“we”, “us”, or “our”). The app helps authorized users sign in, scan a QR code, and generate one-time passwords (OTP / TOTP) to access ITechPro systems.

This Privacy Policy is intended for Google Play Store and Apple App Store disclosure requirements and applies to the TourID mobile application.

2. Information we collect

We collect only what is needed to authenticate you, bind your account to your device, and operate the authenticator securely. We do not sell personal data and we do not show ads.

Data Where it is processed Why
Username and password Sent to ITechPro servers To verify your identity and sign you in
Device information (device identifier, manufacturer/name, model, operating system, OS version, app version) Sent to ITechPro servers at sign-in To recognize the device used with your account and support secure access
Authenticator secrets and account labels obtained from a scanned QR code Stored only on your device in encrypted/secure storage To generate OTP codes on the device
Encryption key returned after successful sign-in Stored only on your device in secure storage To decrypt QR codes issued by ITechPro systems
Language preference Stored only on your device To remember English or Arabic
OTP codes copied to the clipboard Temporarily on your device So you can paste a code; it is cleared shortly after copy

3. Camera

TourID requests camera access only to scan QR codes for adding an authenticator account. Camera frames are processed on the device for scanning. We do not upload photos, videos, or your camera roll to our servers. You can deny camera permission; scanning will not work until permission is granted.

4. Biometrics, Face ID, Touch ID, and device lock

After sign-in, TourID asks your device to confirm it is you using Face ID, Touch ID, fingerprint, or the device PIN/pattern/password. This check is performed by the operating system on your device. We do not collect, store, or receive your biometric templates or lock-screen credentials.

5. How we use information

  • Authenticate users and provide access to TourID.
  • Associate an account with a specific device for security.
  • Generate time-based one-time passwords on the device.
  • Protect secrets stored in the app.
  • Remember the language you selected.
  • Diagnose sign-in or connectivity issues related to our service.

6. Data stored on your device

OTP secrets, account labels, and the encryption key are kept in the device’s secure storage (Keychain on iOS / encrypted storage on Android). Android backup of app data is disabled. When you log out, TourID deletes this locally stored secure data from the app. Uninstalling the app also removes local app data, subject to the operating system.

7. Data sharing

We do not sell your personal information. Username, password, and device information are sent to ITechPro backend servers that operate the login service. We do not share this data with advertisers.

The app may load fonts from Google Fonts. Google may process technical data such as IP address according to Google’s own privacy policy. OTP secrets and login passwords are not sent to Google.

We may disclose information if required by law, a valid legal request, or to protect the security of users and ITechPro systems.

8. Security

  • Login credentials are transmitted to our servers over the network used by the app.
  • Authenticator secrets remain on the device in secure storage.
  • QR payloads from ITechPro are decrypted on the device using a key stored in secure storage.
  • The app blocks screenshots and uses a blur protection when the app is in the background to reduce on-screen leakage of codes.
  • Copied OTP codes are treated as sensitive and are cleared from the clipboard after a short period.

No method of electronic storage or transmission is 100% secure. Please keep your device locked and do not share OTP codes with anyone.

9. Data retention

Account credentials and device information sent at sign-in are retained on ITechPro systems for as long as needed to provide the service, maintain device association, and meet security and legal obligations. Local authenticator data is retained on the device until you log out or uninstall the app.

10. Your choices and rights

  • You may refuse camera permission (QR scanning will be unavailable).
  • You may cancel biometric/device authentication (you will not enter the app).
  • You may log out to delete locally stored secrets and keys from the app.
  • To reset a password or request deletion of your server-side account data, contact your ITechPro system administrator or ITechPro using the contact details below.

Depending on your location, you may have rights to access, correct, or delete personal data we hold, or to object to certain processing. We will respond in accordance with applicable law.

11. Children’s privacy

TourID is intended for authorized business/organizational users. It is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

12. International processing

If you use TourID, your sign-in data may be processed on ITechPro servers that may be located in a different country from your own. By using the app, you understand that this transfer is necessary to provide the service.

13. Third-party services

TourID uses:

  • ITechPro backend — account sign-in and device information.
  • Google Fonts — display fonts in the app interface.
  • Apple / Google device security APIs — Face ID, Touch ID, fingerprint, or device PIN.

TourID does not include advertising SDKs and does not use third-party analytics SDKs to track you across apps or websites.

14. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted at this URL with a revised effective date. Continued use of TourID after an update means you accept the revised policy.

15. Contact

If you have questions about this Privacy Policy or about personal data processed by TourID, contact:

For password resets or account access issues, contact your system administrator.