**Last updated:** May 14, 2026
**Effective:** May 14, 2026
Thank you for using FileFlow (“the app”). This policy explains how the app handles information.
---
1. Overview
FileFlow is a **local-only** file utility. We do not operate servers to collect your file or photo contents, and we do not sell your files, photos, or usage data to third parties.
Except for data flows required by **Apple system services** (e.g. in-app purchase), **your file workflows do not pass through developer servers**.
---
2. What we collect
2.1 What we do not collect
- We do not upload your files, folders, photos, or PDF contents
- We do not collect registration data such as name, email, or phone (no account required)
- We do not embed third-party ad SDKs or perform cross-app tracking for ads
- We do not run our own analytics backend for profiling or marketing
2.2 Data stored on your device
To provide features, the following stays **on your device only**:
| Data | Purpose | Storage |
|------|---------|---------|
| Security-scoped folder bookmarks | Remember authorized Downloads, iCloud, custom folders | UserDefaults / app container |
| Daily free-use counter | Free tier: 3 full runs per calendar day | Keychain (+ UserDefaults mirror) |
| Premium status cache | Faster UI on launch | UserDefaults |
| Last rename undo batch | Undo recent local renames | JSON in app sandbox |
| Language & appearance | Settings | UserDefaults |
| ZIP password | **Not persisted**; held in memory during operation | Not written to disk |
Developers cannot remotely read this data.
---
3. Permissions
3.1 Photo Library
- **When:** You open in-app Photos or the system photo picker.
- **Why:** Read images you select for rename (export copies), ZIP, or PDF merge.
- **Note:** No background scan of your library; no automatic upload.
3.2 Files and folders
- **When:** You authorize folders via the system document/folder picker.
- **Why:** Browse, rename, zip, unzip, PDF, move, copy, delete within granted scope.
- **Note:** Access is limited to authorized folders and their children; re-pick if access expires.
3.3 Network
- Core tools work **offline**.
- Network may be used for App Store IAP, restore purchases, rating links, etc.
---
4. Where processing happens
On device: batch rename and undo, ZIP create/extract (including ZipCrypto passwords in memory), image reorder/rotate/PDF merge, file move/copy/delete.
Outputs are shared via the **system share sheet**; you choose where files go.
---
5. In-app purchases
- Full version is a **one-time non-consumable** purchase processed by **Apple**.
- We do not receive payment card or Apple ID credentials.
- Entitlements are verified with StoreKit on device; we may cache “unlocked” locally.
---
6. Children’s privacy
The app is not directed at collecting personal information from children under 13. Contact us if you believe a child submitted information without parental consent.
---
7. Retention and deletion
- Uninstalling removes sandbox data and local preferences (Keychain items may be cleared by the OS).
- Your original files in Files / iCloud remain under your control.
- Revoke Photos or file access in **Settings → Privacy & Security** on iOS.
---
8. Changes
We may update this policy. The “Last updated” date in-app will change for material updates. Continued use means acceptance of the revised policy.
---
9. Contact
For privacy questions, use the developer contact on the FileFlow App Store product page.
---
10. Governing law
This policy is interpreted subject to mandatory laws in your jurisdiction; your statutory consumer rights are preserved.