RTAuthenticatorRTAuthenticator Terms of Use
Updated: October 14, 2026
Effective: October 14, 2026
Operator: Zhang Zhibao (张治保)
Contact: rowstop@yeah.net
App: RTAuthenticator; HarmonyOS bundle ID top.rows.cloud.security.ml
Read these terms before using RTAuthenticator, especially the sections about local tokens, vault passwords, and recovery limits. Contact us if you have questions. Use the app after confirming that you accept these terms; if you do not accept them, stop using the app. Acceptance does not automatically enable optional camera or biometric permissions. Personal information is handled as described in the Privacy Policy, with any consent required by law obtained separately.
1. Service and Scope
RTAuthenticator is a local two-factor authentication tool for importing, storing, and managing authentication tokens you are authorized to use, and generating TOTP or HOTP codes. The initial release is free, with no ads, registration, cloud sync, or backup export.
You can enter secret keys manually, paste supported import links, scan QR codes, or choose photos to import. The app supports standard OTPAuth and Google Authenticator migration data compatible with the current version. Actual app functionality determines support; compatibility with every third-party authentication format or service is not guaranteed.
Codes are generated locally on your device. Reading online agreements, downloading updates, or visiting an app store may require internet access provided by the relevant platform.
2. Lawful Use and Account Authorization
Only import accounts you own or are legally authorized to manage. Do not obtain, impersonate, or distribute other people's secret keys, QR codes, or verification codes, or use the app for fraud, unauthorized access, or other unlawful activities.
The app does not represent your account's service provider or handle account registration, login, identity verification, or recovery for third-party accounts. Each service determines its own code verification, authentication rules, and account management.
3. Local Tokens and Recovery Limits
Your vault and unlock data are processed on the current device and protected by local encryption and system security capabilities. The operator does not receive your vault and cannot look up secret keys, reset your local password, or remotely recover tokens.
Keep your device, vault password, secret keys, QR codes, and verification codes secure. Keep recovery codes or alternative verification methods for each third-party account. Do not include authentication credentials in support emails.
This version has no cloud backup or export/restore entry. Uninstalling the app, clearing app data, device damage, or losing your password may make tokens unrecoverable. After deleting a token, the app cannot generate its codes. Confirm that another recovery method is available before taking these actions.
TOTP depends on device time and the third-party service's settings. HOTP counters must also remain synchronized with the service. Check algorithms, code length, intervals, and counters when importing. Avoid advancing HOTP counters unnecessarily. If codes fail, check the settings or contact the relevant service provider.
4. Permissions and Personal Information
Camera scanning, photo selection, and biometric quick unlock are optional. You can use manual entry and your vault password if you decline permissions. The device system performs biometric authentication; the app does not read or store raw face or fingerprint samples. Availability depends on your device and system.
Copying writes only the current code to the system clipboard. You actively provide pasted import content through the system input interface. Other apps with appropriate access may be able to read clipboard contents.
See the RTAuthenticator Privacy Policy for information types, purposes, retention, third-party engine diagnostics, and your rights:
https://agreement-drcn.hispace.dbankcloud.cn/index.html?lang=zh&agreementId=2061127093768445632
5. Maintenance and Service Changes
We work to maintain security and stability, but device environments, system updates, and third-party service changes may affect functionality. Obtain and update the app through trusted distribution channels. Do not provide secret keys to software from unverified sources.
If we add registration, paid features, ads, cloud sync, or services that change this scope, we will explain their conditions, update these terms and the Privacy Policy, and obtain any consent required by law. These terms do not authorize future optional services. Material changes affecting existing users will be communicated appropriately.
6. Intellectual Property and Your Data
Rights to legally protected code, names, graphics, and documentation belong to their respective owners. Do not copy or distribute protected content beyond your authorization without permission. This does not restrict activities permitted by law or applicable open-source licenses.
Using the app does not transfer your lawful rights in the data you provide to the operator. Also follow the service rules for third-party accounts.
7. Minors
The app is not specifically directed at children. Minors should use it with a guardian's consent and guidance. Users under 14 should have a guardian's consent and help managing imported accounts, permissions, and recovery methods. See the Privacy Policy for further information about protecting minors' information.
8. Liability and Disputes
We fulfill our obligations under applicable law and these terms. Responsibility for issues involving app defects, device environments, user actions, or third-party services is determined under applicable law and the actual circumstances. These terms do not exclude liability that cannot legally be excluded or limit statutory consumer or personal information rights.
These terms are governed by the laws of mainland China. Contact us by email first about a dispute. If it cannot be resolved through discussion, you may seek relief from a court with jurisdiction as permitted by law.
9. Contact and Updates
Send questions, feedback, or rights requests to rowstop@yeah.net. We will reply within 15 business days of receiving your request. Provide only the necessary description. Do not send secret keys, complete authentication QR codes, vault passwords, or valid verification codes.
Updates will state their revision date and highlight significant changes appropriately. We will obtain fresh consent separately whenever legally required.