Privacy Policy

1. Information We Collect

1.1 Account Information

When you sign in — with a Google account (for Google Drive) or a personal Microsoft account (for OneDrive) — we receive the following from the provider's authentication service:

• Email address — used to identify your account within the App.
• Display name — shown in the user interface for personalization.
• OAuth access token — a short-lived credential used to communicate with the provider's API (the Google Drive API or Microsoft Graph) on your behalf. Tokens are held in volatile memory only and are never written to disk.

1.2 Cloud Storage Metadata

DriveNest builds its analysis from metadata only — it never accesses the contents of your files on any provider. What it requests depends on the cloud you connect:

• Google Drive — the App requests the drive.metadata.readonly OAuth scope, which grants read-only access to file and folder metadata.
• OneDrive (supported since DriveNest v2) — the App connects through the Microsoft Graph API. At sign-in it requests three read-level permissions only: Files.Read (your OneDrive item metadata), User.Read (your basic profile), and offline_access (so your session can refresh without repeated sign-ins). The write permission Files.ReadWrite is not requested at sign-in — it is requested separately, through incremental consent, only at the point you first ask the App to carry out an action on your behalf, and only after the App has explained what it is asking for (see Section 2). If you never use in-app execution, the App never holds write access to your OneDrive.

The metadata we retrieve includes:

• File and folder names, IDs, types, and parent folder relationships.
• File sizes, creation dates, modification dates, and last-viewed dates.
• Content hashes where the provider supplies them (used locally for duplicate detection).
• Sharing status and permission information (used for security audit features).
• Whether an item is trashed and whether you are the owner.
• Your storage quota.

1.3 Locally Stored Preferences

The App stores your preferences on your device, including:

• Color theme and dark/light mode selection.
• Dashboard layout and tab order customization.
• Auto-save and auto-load scan settings.
• Whether the guided tour has been completed.

These preferences contain no personal or identifying information and are stored using the platform's standard local preferences mechanism.

1.4 Saved Scan Data

When you run a scan, the resulting metadata snapshot may be saved as a compressed file on your device's local application storage. Saved scans contain the folder tree structure and file metadata described in Section 1.2, along with a unique scan identifier and timestamp.

1.5 In-App Purchase Information

The App offers optional in-app purchases (Premium and Ultimate tiers) processed entirely by the Google Play Store. We receive only the purchase status (purchased, pending, or restored) and the product identifier.

1.6 Voluntary Feedback Data

The App includes an optional feedback form that lets you submit a price proposal or a feature request. Submitting feedback is entirely voluntary. When you choose to submit, the following information is collected and transmitted to a developer-controlled Google Sheet via Google Apps Script:

• Anonymous device fingerprint — a randomly generated UUID created on first launch and stored on your device. It is not linked to your Google account, name, or email address, and is used solely to enforce a per-device daily submission limit. No submitted feedback is ever associated with your Google account or any other account-identifying information.
• Billing country — the country associated with your Google Play account (e.g. “HU”), retrieved from the Play Store billing configuration.
• Device locale — your device’s language and region setting (e.g. “hu_HU”).
• App version — the version of DriveNest installed on your device.
• Subscription tier — your current plan (Free, Premium, or Ultimate).
• Price proposal details (price proposals only) — the plan tier, currency, and suggested price you enter.
• Feature description (feature requests only) — the free-text description you write.

1.7 Optional AI Assistant

From DriveNest 2.1, the Ultimate plan includes an optional AI assistant that explores your latest scan and suggests what to clean up. It is off by default. Nothing in this section happens unless you turn it on in Settings, accept its terms, and add your own API key from Anthropic (Claude) or OpenAI (GPT). When you run an analysis or ask a follow-up question:

• What is sent — the parts of your scan metadata the assistant examines while it works: file and folder names, paths, sizes, types, dates, whether you own an item, its sharing status (whether it is shared, how many permissions it has, whether it has a public link), duplicate groups and version-history overhead. The goal and follow-up messages you type are sent as well.
• What is never sent — the contents of any file, your sign-in tokens, your email address, and the identities of the people you share files with.
• Where it goes — directly from your device to the provider you chose, over HTTPS, using your own API key. DriveNest has no server in between and never receives this data. The provider processes it under its own terms and privacy policy (Anthropic, OpenAI), and usage is billed by the provider to your own account. How long the provider retains API data is governed by its policies; for OpenAI, DriveNest asks the API not to store the conversation.
• Your API keys — kept only in Android’s secure keystore on your device, never in normal app storage, and never included in a DriveNest settings backup. Turning the assistant off, or declining its terms, permanently deletes every saved key.
• Session record — each session is written to Action history on your device: the provider and model, number of runs, tokens used, estimated cost, the messages you sent, and each suggestion with the files it covered. The assistant’s own replies are not logged. This record stays on your device.

2. How We Use Your Information

We use the information described above solely to:

• Authenticate you with your chosen provider (Google or Microsoft) and communicate with its API (the Google Drive API or Microsoft Graph).
• Display your storage breakdown, folder hierarchy, and file statistics.
• Detect duplicate files by comparing content hashes locally on your device.
• Generate cleanup suggestions based on file age, size, and usage patterns.
• Carry out the cleanup, unshare, and version actions you explicitly approve — on Google Drive as a script you review and run yourself, and on OneDrive by executing the approved action in the app on your confirmation. DriveNest never performs these actions automatically or without your explicit approval.
• Perform a security audit of sharing permissions across your storage.
• Produce PDF and CSV reports when you explicitly request an export.
• Save and restore scan snapshots so you can track storage trends over time.
• Remember your display preferences across app sessions.
• Verify your in-app purchase tier to unlock the appropriate features.
• Review voluntary price proposals and feature requests to inform pricing decisions and product development priorities.
• If you turn on the optional AI assistant, send the scan metadata it examines and the messages you type to the AI provider you chose, so it can propose cleanup suggestions for your review (see Section 1.7).

3. Data Storage and Security

3.1 On-Device Storage

All scan data, preferences, and exports are stored locally on your device in the App's private application directory. No scan data is transmitted to any external server, with one exception: if you use the optional AI assistant, the scan metadata it examines is sent to the AI provider you chose (see Section 1.7).

3.2 Encrypted Backups

When you export a scan backup, the data is bundled into a ZIP archive and encrypted using AES-256 (CBC mode) before being saved. You control where the encrypted backup file is shared or stored via the operating system's share functionality.

3.3 Network Security

All communication with provider APIs (Google and Microsoft) and, if you use the AI assistant, with the Anthropic or OpenAI API is conducted over HTTPS (TLS-encrypted connections). OAuth access tokens are transmitted only to the respective provider's servers and are held in volatile memory for the duration of your session.

4. Data Sharing and Disclosure

The App communicates exclusively with the following external services:

• Google Drive API — to retrieve your Drive metadata using your OAuth token. Google's use of your data is governed by Google's Privacy Policy.
• Microsoft Graph API — when you connect OneDrive (supported since DriveNest v2), to authenticate you with your Microsoft account, read your OneDrive metadata, and carry out the in-app actions you approve. Microsoft's use of your data is governed by the Microsoft Privacy Statement.
• Google Play Billing — to process in-app purchases. Payment data is handled entirely by Google and is subject to Google's terms.
• Google Apps Script / Google Sheets — when you voluntarily submit a price proposal or feature request, the data described in Section 1.6 is transmitted over HTTPS to a Google Apps Script web app and stored in a Google Sheet controlled by the developer. This communication occurs only when you explicitly tap Submit in the feedback form. The data is used solely by the developer and is never shared with third parties.
• Anthropic API or OpenAI API — only if you turn on the optional AI assistant and add an API key for that provider, to send the scan metadata and messages described in Section 1.7. The provider’s use of this data is governed by your agreement with it and by its privacy policy (Anthropic, OpenAI).

The App does not include any third-party analytics, advertising, crash reporting, or tracking SDKs. No data is collected passively or shared with any party other than as described above.

5. User-Initiated Exports and Sharing

You may choose to export data from the App in the following formats:

• CSV files — containing file metadata (names, paths, sizes, dates, sharing status) for specific views such as duplicates, cleanup targets, or security findings.
• PDF reports — containing charts, statistics, and summaries of your storage analysis.
• Encrypted scan backups (.dnbak files) — containing your full scan snapshot, AES-256 encrypted.

Exports are shared via the operating system's share sheet. You are responsible for choosing where exported files are stored or sent. The App does not automatically upload exports to any service.

6. Data Retention and Deletion

• Session data (access tokens, in-memory state) is discarded when you sign out or close the App.
• Saved scans are retained on your device until you manually delete them via the Saved Scans manager in Settings, or until you uninstall the App.
• Preferences are retained until you reset them in Settings or uninstall the App.
• AI API keys are retained until you remove them, turn the AI assistant off, decline its terms, or uninstall the App.
• Action history, including AI assistant session records, is kept on your device for up to one year and then removed automatically, or earlier if you uninstall the App.
• Data sent to an AI provider is retained by that provider according to its own policies, not by DriveNest.
• Signing out clears your authentication state immediately. Saved scans and preferences remain on-device for your convenience but can be deleted at any time.
• Uninstalling the App removes all locally stored data, including saved scans, preferences, and any temporary export files.

7. Children's Privacy

DriveNest is not directed at children under 13. We do not knowingly collect personal information from children. The App requires a Google or Microsoft account to function, and account creation is subject to the age requirements of Google or Microsoft respectively. Users must meet the minimum age requirement in their country to create and use such an account.

8. Your Rights and Choices

• Access: All data the App holds is visible to you within the App itself (scan results, saved scans, preferences).
• Deletion: You can delete saved scans, reset preferences, and sign out at any time. Uninstalling the App removes all data.
• Revoke access: You can revoke DriveNest's access at any time — for Google via your Google Account permissions page, and for Microsoft via your Microsoft account app permissions page.
• AI assistant: The assistant stays off unless you turn it on. You can turn it off, remove a saved API key, or decline its terms at any time in Settings; turning it off or declining deletes every saved key. For data already sent to Anthropic or OpenAI, use that provider’s own privacy controls.
• Portability: You can export your scan data as CSV, PDF, or encrypted backup files at any time.

9. Website

This section covers the website at drivenest.falcondrivelabs.com (the pages served under falcondrivelabs.com) and is separate from the in-app data practices described in the preceding sections.

9.1 No cookies, no tracking

The one script not written by us is a small performance-measurement script that our hosting provider, Netlify, adds to each page. It measures how quickly the page loads and responds, and sends those timings to Netlify together with the page address, your device’s operating-system family and screen size. It uses no cookies, stores nothing in your browser, and uses no identifier that links one page view or visit to another. (A private, password-protected page used only by the site owner keeps its sign-in and display settings in that browser; no visitor uses it.)

9.2 Hosting logs and visit statistics

Our hosting provider, Netlify, processes standard server-log information — such as your IP address, the page requested, the referring site and the time of the request — as a normal part of operating and securing the website. From these logs Netlify provides us with aggregated visit statistics: numbers of page views and unique visitors, page-load timings (from the script described in 9.1), and counts per page, per referring site and per country. We keep these aggregated statistics to understand how the website is used and to improve it; they contain no IP addresses and nothing that identifies an individual visitor. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in operating and improving the website. Netlify’s processing is governed by the Netlify Privacy Statement.

9.3 Google Play link clicks

Links to DriveNest on Google Play pass through the website, which adds one to a daily count for that link before forwarding you to the store. Only the count is stored — no IP address, cookie, or other information about you. The link to Google Play carries a label naming the website and the page you came from, so that Google Play can report how many store visits and installs came from the website. Your visit to Google Play is governed by Google’s Privacy Policy.

9.4 Links to other services

The website links to other services, such as Google Play and YouTube. Content from those services is not embedded in the website; when you follow such a link, that service’s own privacy policy applies.

9.5 Past promotional campaign

Until 30 June 2026 we ran a limited promotional campaign on the website through which a one-time promotional code could be issued to you. When a code was issued, we recorded an approximate geographic location — country, and where available region and city — derived from your IP address by our hosting provider at that moment, together with a randomly generated visit identifier and the code issued. We did not store your IP address, name, email address, or any Google account information in connection with the code.

This data is used solely for internal, aggregate statistics on the campaign’s geographic reach, on the basis of our legitimate interest (Article 6(1)(f) GDPR) in measuring our promotional activities. It is never used to build a profile of you, to make any automated decision about you, or for advertising. It never leaves our own hosting backend, is not shared with any third party, and is accessible only to the developer over an authenticated connection.

Promotional-code records are retained only for as long as needed to evaluate the campaign, after which they are deleted. The location is linked only to a random visit identifier, not to your name, email, or account, so we generally cannot single you out from it. You may nonetheless contact us at drivenestapp@gmail.com with any question or request regarding this data — including access or erasure — and we will assist wherever we are reasonably able to locate the relevant record. Under the GDPR you also have the right to object to processing carried out on the basis of legitimate interest.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated effective date at the top of this document. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the revised policy.