Turn on App lock in Settings and ToRun asks for Face ID, Touch ID or your device passcode before it opens. It only re-locks after more than thirty seconds in the background, so stepping into another app for a moment does not ask again. The check happens on your device and nothing about it leaves the phone.