Privacy policy

The short version

• The apps have no built-in server. You enter the address of a DiscoDrive server yourself — usually one you or your organisation run.
• Your files, photos and settings go only to that server. We never receive or see them.
• No advertising, no analytics, no tracking, no third-party SDKs.

What the app sends to your server

• Account and device: when you connect the app, the server issues a device token. The app sends the device name so you can see and revoke the device on the server.
• Files you sync or upload: files and folders in the synced folder, files you upload and — only if you turn on photo backup — photos and videos from your library. The app never deletes anything from your photo library.
• Calendars and contacts: only if you set up their sync. On iPhone and iPad the system itself, not the app, syncs them with your server.
• Vaults: files in an encrypted vault are encrypted on your device before they are sent. Neither the server nor its operator can read them. The vault password never leaves your device.

This data is stored and processed by whoever runs the server you connect to. To learn how they handle it, contact them.

What stays on your device

• The device token, kept in the system’s secure storage (the Keychain on Apple devices).
• A local index of your files, copies of files you opened, the synced folder and your settings.
• Diagnostic logs, only if you turn them on in Settings. They are written on your device and leave it only if you export them yourself.

Signing out revokes the device on the server and deletes the token and the local index from your device.

Permissions

• Photos — only for photo backup, if you turn it on.
• Face ID (iPhone and iPad) — to unlock a vault without typing its password. The check is done by the system; nothing is sent anywhere.
• Notifications (Android) — to show the progress of uploads and sync.

What we do not do

The apps contain no advertising, analytics or tracking code, do not use the advertising identifier and do not share data with data brokers. If you have agreed to share diagnostics with Apple or Google, they may pass anonymous crash reports on to us.

Deleting your data

Data on your device is removed when you sign out or delete the app. Data on the server is deleted from the app (files, Trash, devices) or by whoever runs the server. To delete your whole account, ask the person who runs the server.

Children

The apps are not directed to children under 13.

Changes

We will publish any change to this policy on this page and update the date above.

Contact

For any questions, write to info@discodrive.app