Privacy Policy

1. Summary

2. Who we are and how to reach us

File Manager One is published by RyuPy ("RyuPy", "we", "us"), the developer named on the app's Google Play listing. RyuPy is the controller of the limited personal data described in this policy (in practice, contact-form messages and the data processing we decide on inside the app). Google is an independent controller for the data its advertising and consent SDKs collect.

For any privacy question, data request, complaint or to reach the person responsible for data protection, use our contact form and choose "Privacy or data request" (or "Complaint"). We acknowledge complaints within 30 days and answer requests within the time the applicable law requires (normally one month).

3. What this policy covers

This policy covers the File Manager One Android app and the website filemanager.one. It does not cover third-party services you choose to use through the app (for example your cloud provider, your NAS or Google Play). Those services have their own privacy policies.

4. Data that stays on your device

The app processes the following locally. None of it is sent to us:

• Your files and their metadata (names, sizes, dates, media tags) for browsing, search, previews and cached thumbnails.
• History and settings: recently opened files, playback positions, bookmarks, stream addresses, network scan results and preferences.
• Cleaner analysis, including duplicate and photo detection. Cross-cloud duplicates are matched with the file hashes your providers report, without downloading the files.
• Installed apps and, if you grant Usage Access, app usage statistics, to show the Apps screen, app sizes and unused apps, and to protect folders of installed apps.
• Server transfer history (file name, size, client IP and device) when you use the built-in servers.
• An integrity check of the app's own signature and installer to detect modified copies. Only if a copy looks modified does the app fetch the public Google Play page of File Manager One.
• Root, terminal, the motion sensor (optional shake gesture) and the device model name are used locally only.

You can clear the histories in the app, or remove all of the app's private data with Android's "Clear storage" or by uninstalling.

5. Device permissions and why we ask

The app does not request camera, microphone, location, contacts, phone, SMS, calendar or Bluetooth permissions.

6. Advertising and consent (Google AdMob)

The free version shows ads served by Google AdMob: one banner at the bottom of browsing, list, tool and settings screens, and in the editors (photo, video, audio, PDF, document and spreadsheet) at most one full-screen ad every three minutes, only after you save or export. No ad plays while you watch, listen, view or edit, and there are no ads in the Safe Folder. Premium subscribers see no ads.

• Consent first. Before any ad is requested, the app uses Google's User Messaging Platform (UMP). In the EEA, the UK and Switzerland you are asked for consent; in US states with privacy laws you are offered an opt-out of sale/sharing. No ad is requested until UMP says ads may be requested.
• What Google collects. To show, measure and protect ads, the Google Mobile Ads SDK may collect your IP address (approximate location), device and app information, ad interactions, diagnostics, and device identifiers such as the Android Advertising ID and app set ID, and may use Privacy Sandbox APIs (Topics, Attribution). Third parties, including Google, may place or read identifiers on your device to serve ads. Whether ads are personalised depends on your consent choices.
• Learn more: How Google uses information from sites or apps that use its services and the Google Privacy Policy.
• Change your choice any time in the app: Settings > Privacy > Ad preferences (shown when your region requires it). You can reset or delete your Advertising ID in Android Settings (Google / Privacy / Ads).
• To prevent accidental repeated taps, the app keeps a small local counter of ad taps. It is not sent to us.

Data from your files, cloud accounts or Google APIs is never used for advertising and never passed to AdMob or any ad network.

7. Cloud accounts you connect

You can connect your own accounts at Google Drive, Dropbox, Microsoft OneDrive, Yandex Disk, Mail.ru Cloud, MEGA, pCloud, Koofr, OpenDrive, Nextcloud, ownCloud, Seafile, any WebDAV server, and Amazon S3 or S3-compatible storage. For each one:

• You sign in on the provider's own page or enter the credentials the provider requires. The app requests only the access needed to browse, open, upload, download, rename, move, copy, delete and share your files at your request, and to show your account name, e-mail and storage quota.
• File lists, file contents and account details travel directly between your device and the provider, over the provider's encrypted connection (or plain HTTP if you enter an http:// server address yourself). We never receive them.
• Your account name and e-mail are stored on the device to label the account.
• Share links: if you choose "share link", the provider creates a public link and anyone who has it can open the file.
• Removing an account in the app deletes the stored tokens and credentials from the device. It does not cancel the permission at the provider. To revoke it fully, use your provider's settings, for example:
  • Google: myaccount.google.com/permissions
  • Microsoft: account.live.com/consent/Manage (personal) or myapps.microsoft.com (work/school). You can revoke File Manager One's access there at any time.
  • Dropbox: dropbox.com/account/connected_apps
  • Yandex: your Yandex ID security settings; Mail.ru: your Mail.ru account security settings (delete the app password)
  • Nextcloud, ownCloud, Koofr, Seafile and similar: delete the app password or device session in your account settings
• Provider privacy policies apply to the data the provider holds, for example the policies of Google, Microsoft, Dropbox and Yandex.
• Dropbox: RyuPy is responsible for the privacy, security and integrity of Dropbox user data accessed by the app, and uses it only as you authorise. Microsoft: data from Microsoft APIs is used only to provide the features you use, is never used for ads, and stays only on your device, where it is deleted when you remove the account or uninstall the app. Yandex: data is processed only with your explicit consent given when you sign in.
• Yandex sign-in passes through a small static redirect page on filemanager.one (/oauth/callback.html) that hands the one-time sign-in code back to the app. The page stores nothing itself; like any web server, the host may keep standard access logs (which can include the URL and your IP address) for a short time for security. The code is useless without a secret that never leaves your device.
• MEGA: your password is used only to sign in and is not stored; the session and decryption key are stored encrypted on the device. Encryption with MEGA happens on the device.

8. Google user data and Limited Use

If you connect Google Drive, the app asks Google only for access to the Drive files and folders it creates or that you open with it (the drive.file scope), plus your basic profile (name and e-mail address). It cannot see your other Drive files.

• What is accessed: file and folder names, metadata (size, dates, type, hashes), file contents you open, upload, download or edit, sharing settings when you create a share link, your storage quota, and your Google account name and e-mail.
• How it is used: only to provide the user-facing features you use: browsing, opening, transferring, renaming, moving, deleting, sharing and finding duplicates of your Drive files.
• Where it is stored: only on your device. An access token is cached on the device; your Google account on the phone remains the credential. Downloaded files are saved where you choose.
• Sharing: Google user data is not transferred to anyone (including us), except as needed to provide or improve user-facing features you request, for security purposes, to comply with applicable law, or as part of a merger, acquisition or sale of assets with your prior consent.
• Google user data is never used for advertising (including retargeting, personalised or interest-based ads), never sold, never passed to AdMob or other ad networks, and never used to train generalised AI or machine-learning models.
• No human reads your Google user data, except with your explicit agreement for specific messages, when needed for security, or to comply with law.

File Manager One's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Drive is a trademark of Google LLC. Use of this trademark is subject to Google Permissions.

9. Network connections, casting and streams

• Servers you add (SMB, FTP, FTPS, SFTP, WebDAV, S3): the app connects directly to the address you enter. FTP and http:// WebDAV are not encrypted, so passwords and files can be seen by others on the same network. Prefer SFTP, FTPS or https.
• Find devices: when you tap it, the app scans your local network (mDNS, NetBIOS name queries, reverse DNS and connection tests on common file-sharing ports) to list nearby PCs and NAS devices. Results (IP, name, services; no MAC addresses) are cached on the device. Only scan networks you are allowed to use.
• Casting to Chromecast or DLNA/UPnP TVs: the app finds TVs on your local network and serves the chosen file to the TV through a temporary local link protected by a random token. Nothing leaves your local network.
• Network streams: the app opens http, https or rtsp addresses you enter, directly.

10. Built-in servers

The HTTP, FTP/FTPS and Wi-Fi Transfer servers run only when you start them, and accept connections only from devices on your local network. By default the HTTP and FTP servers are protected by an automatically generated password and share your whole internal storage (you can limit them to chosen folders); uploads are allowed and delete/replace is off by default. The Safe Folder and Recycle Bins are never shared. HTTP and plain FTP are not encrypted. A running server shows a notification with a Stop button. Turn servers off when you are done.

11. How credentials are stored

Credentials never leave your device except to the service they belong to. All of them are kept in encrypted storage protected by the Android Keystore:

• cloud sign-in tokens and app passwords (Dropbox, Yandex, Mail.ru, Nextcloud, ownCloud, pCloud, Koofr, OpenDrive, Seafile, WebDAV and others);
• passwords and key passphrases for FTP, FTPS, SFTP, SMB, S3 and network WebDAV connections, and the MEGA session;
• the passwords of the built-in HTTP and FTP servers.

12. Safe Folder and Recycle Bin

• Safe Folder encrypts files on your device with AES-256-GCM. Keys are protected by the Android Keystore (your screen lock or biometrics), an optional passcode (Argon2id) and a recovery phrase. We never see your keys, passcode or recovery phrase and cannot recover them. If you lose both your unlock method and your recovery phrase, the files are permanently lost. Removing your screen lock or resetting the phone invalidates the phone-lock key, so keep the recovery phrase (and any passcode) safe. The Safe Folder is free for everyone. Screenshots are blocked inside the Safe Folder.
• The Safe Folder vault and any .fm1safe backups are stored on shared storage and survive uninstalling the app. Turning the Safe Folder off decrypts everything back first.
• Optional time locks read the current time from the HTTP Date header of www.google.com (or www.cloudflare.com as fallback). No personal data is sent beyond a normal web request.
• Recycle Bin folders (one hidden .RecycleBin per drive) keep deleted files and their original paths for 30 days by default (adjustable). They also survive uninstalling.

13. Premium and Google Play

Premium is an optional subscription sold through Google Play. Google processes the payment; we never see your card or payment details. We receive only what Google Play Billing provides to confirm the subscription (such as a purchase token and its status) on your device. The app uses Google Play to check for app updates. Google's privacy policy applies to Google Play.

14. Other network requests

Links you tap (the Play listing, Manage subscriptions, this website, a lyrics web search) open in your browser. The app does not fetch album art or lyrics online.

15. This website and the contact form

filemanager.one is a static website. It sets no cookies and uses no analytics or ads. It loads fonts from Google Fonts, which receives your IP address to deliver them. Our web host keeps standard server logs (IP address, time, page, browser) for security and troubleshooting.

When you use the contact form we receive your name, e-mail address, topic, subject and message, plus your IP address and browser type, which are used for spam protection (a hashed rate-limit record kept for up to 24 hours). There is no third-party CAPTCHA. Your message is delivered to our mailbox by e-mail. We use it only to answer you and handle your request, and keep it for as long as needed for that, normally no longer than 24 months, unless the law requires longer.

16. Legal bases (GDPR / UK GDPR)

• Consent (Art 6(1)(a)) for personalised advertising and for storing or reading identifiers on your device, collected through Google's consent form. You can withdraw it at any time in Settings > Privacy > Ad preferences; this does not affect earlier processing.
• Contract (Art 6(1)(b)) for providing the features you use, including connections you set up and your Premium subscription.
• Legitimate interests (Art 6(1)(f)) for answering your messages, spam and fraud prevention, website security logs, and showing non-personalised ads where permitted. You have the right to object to processing based on legitimate interests at any time.
• Legal obligation (Art 6(1)(c)) where we must keep records or respond to authorities.

You are not required by law or contract to give us personal data. Without consent you still get the app, with non-personalised or limited ads. We do not make decisions about you based solely on automated processing.

17. Who receives data

• Google (AdMob, User Messaging Platform, Google Play, Google Fonts), as described above.
• The cloud providers and servers you choose, only at your request.
• Our web host and e-mail provider, which process contact messages and server logs on our behalf.
• Authorities, if the law requires it.

We do not sell personal data. We do not otherwise share it.

18. International transfers

RyuPy operates from outside the EEA and the UK, and Google and our hosting providers may process data in other countries, including the United States. Where personal data from the EEA, UK or Singapore is transferred, we rely on adequacy decisions, the European Commission's Standard Contractual Clauses, the UK addendum or equivalent safeguards offered by those providers, so that the data keeps a comparable level of protection.

19. Retention and deletion

• On your device: kept until you clear it, remove the account or connection, clear the app's storage or uninstall. Uninstalling does not remove the Safe Folder vault, .fm1safe backups, Recycle Bin folders, or files you downloaded or received; delete those yourself if you wish. Copies in your Google backup are managed in your Google account.
• Contact messages: as explained in section 15.
• Server logs: kept for a short period (typically up to 30 days) and then deleted or rotated.
• Ad data: retained by Google under its own policies.

Because the app has no account system and we do not hold your files or usage data, there is normally no data held by us about you other than contact messages. You can still ask us to delete anything we hold.

20. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or Singapore's Personal Data Protection Act), you may have the right to access, correct, delete, restrict or object to the use of your personal data, to data portability, and to withdraw consent at any time. Withdrawing consent to ads means you see non-personalised or limited ads; withdrawing consent for contact data means we can no longer answer you.

To use any right, send a request through the contact form ("Privacy or data request"). We may ask for information to confirm the request is yours. We will not charge you or treat you differently for using your rights.

You can also complain to us directly through the form (choose "Complaint") and to a data protection authority, for example your local EU authority, the UK Information Commissioner's Office (ico.org.uk) or Singapore's Personal Data Protection Commission (pdpc.gov.sg).

21. US state privacy notice

In the last 12 months we have collected these categories: identifiers (name, e-mail, IP address) and messages you send us through the contact form, and, through Google's ads SDK, identifiers (Advertising ID, IP address), internet activity (ad interactions) and approximate location derived from IP. Sources are you and your device. Purposes are those in this policy. When personalised ads are shown, Google's use of data for cross-context behavioural advertising may count as "sharing" under California law. We do not sell personal data for money, and we do not knowingly sell or share data of consumers under 16.

You can opt out of sale or sharing through the US privacy option in Settings > Privacy > Ad preferences (where shown) or by limiting ad tracking or deleting your Advertising ID in Android settings. The app follows the consent signals Google's consent platform applies. Our website has no tracking, so Do Not Track and Global Privacy Control signals do not change anything on it. You or an authorised agent may request to know, correct or delete your data through the contact form; we will verify the request and will not discriminate against you for making it. Third parties (Google) may track users across apps and sites for advertising, as described in section 6.

22. Children

File Manager One is a general-purpose tool and is not directed to children under 13 (or under the age of digital consent in their country, up to 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

23. Security

We design the app so that your data stays under your control: processing on the device, direct encrypted connections where the service supports them, Keystore-backed encrypted storage for every sign-in token and password, on-device encryption for the Safe Folder, and local-network-only servers with passwords and brute-force lockouts. The website is served over HTTPS. No system is perfectly secure: keep your phone locked and updated, use encrypted protocols, and turn servers off after use.

24. Changes to this policy

We may update this policy when the app or the law changes. We will post the new version on this page with a new effective date and, for material changes, give notice in the app or on this website before they take effect.

Effective date: 15 October 2026. Questions? Contact us.