Privacy Policy
Last updated: 2026-05-21
Introduction
FyleMate ("we", "us") provides macOS and mobile companion apps that help you back up, organize, migrate, and restore photos and videos across your devices. This Privacy Policy explains what data we collect, why, and how you can control it.
Bottom line: We do not sell or share your personal data. We do not use third-party ad networks or cross-site trackers. Photo and video content stays on your device — we never see your photos.
Data We Collect
| Category | Data | Purpose | Linked to you? | Retention |
|---|---|---|---|---|
| Account ID | SIWA stable user identifier (accountUUID) |
Sync your Pro subscription across Mac App Store / Dev ID versions | Yes | Until account deletion, unless we must retain limited records for fraud prevention, dispute handling, or legal compliance |
| Purchase History | StoreKit 2 Transaction ID, product ID, expiration | Verify subscription status, handle refunds, server-side reconciliation with Apple | Yes | Until account deletion, unless we must retain limited records for fraud prevention, dispute handling, or legal compliance |
| Crash & Performance Data | MetricKit diagnostic payloads, only when system "Share Analytics" is enabled | Improve stability and performance | No (delivered via Apple's anonymous channel) | 30 days |
| Optional Diagnostic Reports | OSLog excerpts you choose to send via "Export Diagnostic Report". May include device state, error codes, and file path fragments. You can review the report before sending. | Help us debug your specific issue | Yes when sent (your mail client's From address is naturally attached) | Deleted after resolution |
We do NOT collect:
- Your photos and videos. Media content remains on your device by default; FyleMate servers do not receive photos or videos. On-device analysis uses Apple frameworks; any cloud backup destination you configure (NAS / Dropbox / OneDrive / iCloud Drive, etc.) is processed by you and that service directly.
- Your browsing history
- Your contacts, calendar, or location (other than EXIF GPS read locally for organization)
- Any data for advertising, ad tracking, or audience analytics
- Your password (Sign in with Apple handles authentication; we never see passwords)
- Your Sign in with Apple email as account data (Apple may offer to share an email when you sign in; we do not store it). If you contact support directly, we receive your email address from that message and use it only to respond.
Third Parties
- Apple StoreKit / App Store Server Notifications V2 — required for subscription verification. Apple's privacy policy applies.
- FyleMate License Server (Cloudflare Workers + D1) — stores your account ID (SIWA subject identifier), subscription transaction and status metadata (Apple
originalTransactionID, product ID, expiration, auto-renew flag, environment), and App Store Server Notification records needed for verification and reconciliation. - iCloud Key-Value Store — for Pro users, syncs your UI preferences (appearance mode / language). Stored in your iCloud, we never read it.
Hosting and Security Provider
Our License Server runs on Cloudflare Workers + D1 (US/EU regions). As our hosting and edge-security provider, Cloudflare processes request metadata necessary for delivering the service and protecting it from abuse — including your IP address, request time, User-Agent, and security/diagnostic logs. This processing is governed by Cloudflare's privacy policy.
We do not use Google Analytics, Mixpanel, Amplitude, Firebase Analytics, or any third-party advertising SDK.
Where Your Data Lives
- Subscription data: Cloudflare Workers + D1 (US/EU regions, depending on your location)
- Diagnostic logs: Locally on your device only (
OSLog), unless you explicitly export - Preferences: Locally + your iCloud (Pro users) — we never read your iCloud
- Photos / videos: Locally on your devices, plus any backup destinations you explicitly configure (NAS / cloud storage). We never receive your media.
Your Rights
Delete Your Account & Data
In FyleMate macOS app: Settings → Account → Delete My Account
- You will be asked to sign in with Apple to verify you are the account owner.
- On the server, we cascade-delete the account record, subscription records, and webhook event audit.
- This does NOT cancel your Apple subscription. If you have an active Pro subscription, you must cancel it separately in App Store → Apple ID → Subscriptions. Otherwise Apple will continue to charge you.
- Local data on your devices is not automatically deleted — you can remove FyleMate from System Settings.
Email request: support@fylemate.com (response within 30 days).
GDPR / EU Users
You have the right to: access, rectify, delete, restrict, object, and port your personal data. Email support@fylemate.com to exercise these rights.
Legal bases:
- Contract performance — account & subscription data
- Legitimate interests — fraud prevention, abuse detection, security and service integrity
- Consent — optional diagnostic reports you choose to send
CCPA / California Users
We do not sell or share your personal information. As a California resident, you may request access, deletion, or correction. Email support@fylemate.com. We do not discriminate against users who exercise these rights.
PIPL / Mainland China Users
If FyleMate is offered on China App Store, we will provide a separate notice and obtain separate consent where required by the Personal Information Protection Law, including for any cross-border transfer of personal information. Email support@fylemate.com.
Children
FyleMate is not directed at children. We do not knowingly collect personal information from children. If we become aware of such collection, we delete it promptly.
Changes to This Policy
We may update this Policy. Material changes will be announced in the app and via the macOS update mechanism. Continued use after such notice constitutes acceptance.
Contact
Email: support@fylemate.com