update docs

docs/thijooree/14-settings.md

@@ -6,14 +6,16 @@ The settings hub and the logins management screen.
 
 ## Settings Hub — `SettingsFragment`
 
-A simple preference-list screen with navigation links to sub-sections:
+A simple preference-list screen with navigation links to sub-sections (order as defined in `SettingsFragment.kt:26-33`):
 
 | Entry | Destination |
 |---|---|
 | Logins | `SettingsLoginsFragment` |
-| Security | `SettingsSecurityFragment` |
 | Appearance | `SettingsAppearanceFragment` |
+| Privacy & Security | `SettingsSecurityFragment` |
+| Notifications | `SettingsNotificationsFragment` |
 | Storage | `SettingsStorageFragment` |
+| About | `SettingsAboutFragment` |
 
 ---
 
@@ -55,12 +57,16 @@ A **+** (Add) button navigates to `LoginActivity` → `BankSelectionFragment` to
 A **Logout** button on each login card shows a confirmation dialog. On confirm:
 - Session tokens are revoked where supported
 - Credentials are removed from `CredentialStore`
-- All associated `MibAccount` objects are removed from `BasedBankApp`
+- All associated `BankAccount` objects are removed from `BasedBankApp`
 - The accounts list is refreshed
 
-### Business OTP Seed (MIB)
+### BML Business Profile Activation
 
-For MIB corporate/business profiles, an **OTP Seed** entry allows importing a TOTP seed string. The seed is stored encrypted in `CredentialStore` and used by the [OTP Screen](12-otp-screen.md).
+For inactive BML business profiles, an **Activate** button kicks off the OTP-channel selection (email / SMS) and OTP confirmation flow — see `SettingsLoginsFragment.kt:572, 722 activateBmlBusinessProfile()` and [Business Profile OTP](../bmlapi/02-business-otp.md).
+
+### OTP Seed
+
+OTP seeds (MIB and BML business) are imported **during initial login** in `CredentialsFragment` — either by scanning the `otpauth://` QR or pasting the raw seed. The seed is stored encrypted in `CredentialStore` and used by the [OTP Screen](10-otp-screen.md). To replace a seed, remove the login and re-add it.
 
 ---