Privacy

Effective 2026-06-06

This policy covers the Tokn app and this website. Tokn is a free service from DiamondForge Labs (the “Service Provider”), provided as is. The app is built so there is nothing to collect. The website uses privacy-friendly, self-hosted analytics.

What the app collects

The Application does not obtain any information when you download and use it. No registration or account is required.

• No account. You never sign up or log in. There is no Tokn server.
• No analytics or telemetry. The app does not track usage and ships no ad or analytics SDKs. It does not use Google Play Services.
• Your data stays on your device. Accounts and secrets live in an SQLCipher-encrypted database on your phone. Codes are generated locally and the app works fully offline.
• Backups and sync are yours. Encrypted backups are written where you choose. Device-to-device sync happens directly between your phones over the local network and is end-to-end encrypted. Nothing passes through us.
• No location. The app does not collect precise location information from your device.

The app requests only the permissions it needs:

• Camera to scan QR codes when adding an account or syncing.
• Internet (optional, off by default) only if you opt in to fetching service icons.
• Biometric to unlock the vault.

This website

Privacy-friendly analytics. This site uses Umami, a self-hosted, cookieless analytics tool running on our own infrastructure at analytics.diamondforge.me. It records aggregate, anonymous visit statistics such as page views and referrers. It sets no cookies, builds no profile of you, and your data is never sold or shared with advertisers. There is no session replay and no cross-site tracking.

Self-hosted fonts. Fonts are served from the site itself, not a third party.

Outbound links. Buttons to Google Play, F-Droid, and GitHub take you to those services, which have their own privacy policies.

Third parties

The app does not collect any information, so nothing about the app is shared with third parties. The website analytics described above run on our own self-hosted infrastructure, so visit data is not handed to a third-party analytics provider.

Your opt-out rights

You can stop all collection by the app by uninstalling it, using the standard uninstall process on your device or the marketplace you installed from. For the website, you can block analytics with your browser settings, a content blocker, or by sending a Do Not Track signal.

Children

The Application is not used to knowingly solicit data from or market to children under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children, and encourages all children never to submit any personally identifiable information through the Application. Parents and legal guardians are encouraged to monitor their children's internet usage and to help enforce this policy by instructing their children never to provide personally identifiable information through the Application without their permission.

If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application, please contact us at click to reveal email so we can take the necessary action. You must also be at least 16 years of age to consent to the processing of your personally identifiable information in your country (in some countries we may allow your parent or guardian to do so on your behalf).

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The app collects nothing, and the website holds only aggregate, anonymous statistics, so there is no personal data store to expose.

Changes

This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes by updating this page with the new policy and effective date. You are advised to review this page regularly, as continued use is deemed approval of all changes.

Your consent

By using the Application, you consent to the processing of your information as set out in this Privacy Policy, now and as amended by the Service Provider.

Contact

If you have any questions about privacy or these practices, email us at click to reveal email. For bugs or feature requests, open an issue on GitHub.