Privacy Policy for TL Authenticator

Last Updated: November 21, 2025

1. Introduction

Welcome to TL Authenticator. This privacy policy explains how we collect, use, and protect your information when you use our mobile application ("App"). Your privacy is important to us, and we are committed to protecting it.

2. Information We Collect

The App is designed to collect a very limited amount of information, solely for its core functionality. We collect the following:

• Username: We require you to provide a username. This username is used to identify your account when sending authentication codes to our server.

The App does not collect any other personal or sensitive information, such as your name, email address, location, contacts, or device identifiers.

3. How We Use Your Information

Your information is used exclusively for the following purposes:

• Generating and Sending Authentication Codes: The App generates a temporary, six-digit authentication code. This code, along with your username, a timestamp, and an app identifier, is sent to our secure server at https://rightcars.azurewebsites.net to complete the authentication process.
• Local Storage: To provide a seamless user experience, your username is saved in secure, encrypted storage on your device so you do not have to enter it every time you use the App.

4. Data Transmission and Security

We take the security of your data seriously. All data transmissions between the App and our server are protected using industry-standard measures:

• Encryption in Transit: Data is sent using HTTPS (SSL/TLS), which encrypts the communication channel between the App and the server.
• Request Integrity: Each request sent to the server is signed with an HMAC-SHA256 signature. This allows our server to verify that the request has not been tampered with during transmission.

5. Data Storage and Retention

Your username is stored locally on your device using the FlutterSecureStorage functionality, which utilizes Keychain on iOS and Keystore on Android for enhanced security. This data remains on your device until you clear the app's data or uninstall the App.

Data sent to our server (username and authentication code) is processed for authentication and may be logged for security and auditing purposes. Please contact us for more details on server-side data retention policies.

6. Third-Party Services

The App does not use any third-party services for advertising, analytics, or data processing. All data is sent directly and exclusively to our own server infrastructure.

7. Children's Privacy

Our service is not intended for use by anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us.

customercare@tlinternationalgroup.com