Unifiles
Get started

Privacy policy

Effective 31 October 2026

Unifiles (“we”) lets you see and move files across your own computers, phones, external drives and cloud accounts from one place. This policy explains what information we handle, why, and the choices you have. The short version: your files stay where they are; we don't store their contents, sell your data, or use it for advertising.

Information we collect

  • Account information: your name, email address and profile picture (if you sign in with Google), or your email and a securely hashed password (if you sign up with email).
  • Workspace information: workspace names, members you invite and their roles, favourites and tags.
  • File information (metadata): names, folder locations, sizes, types and dates of files on the devices and clouds you connect, so you can browse and search them, including while a device is off. Not their contents, and not their pictures: see below.
  • Connections: the names and types of devices you pair, and for each cloud account you connect, its access tokens and its email address (so two accounts with the same name can be told apart; only members of your workspace see it). Cloud tokens are encrypted (AES-256-GCM). For devices we keep only one-way fingerprints: of their key, and of the device's own ID, so that pairing the same phone or computer again reconnects it instead of adding it twice. The ID itself never leaves the device.
  • Activity: a log of actions in your workspace (for example “moved a file to the trash”), so you can see what happened and when.
  • Billing: your plan, and the payment reference and proof you submit when paying by UPI.
  • Technical data: IP addresses, used briefly to limit repeated sign-in attempts, and standard server logs.

File contents

We do not keep copies of your files or your pictures. Contents pass through our servers only when you ask for something that needs them:

  • when you copy or move a file between storages, it streams through in small pieces held in memory and is not saved;
  • thumbnails (small previews of pictures and videos) are made by the Unifiles app on your device and passed straight to your browser; we don't save them. Your browser keeps them for up to 15 minutes, and the app keeps the ones it made on your device so it doesn't have to make them again;
  • when you open, preview or download a file from a computer or phone, it's streamed to your browser through a temporary relay file so a video can start before it has all arrived. That file is encrypted with a key that exists only in our server's memory, and it's deleted 15 minutes after it was last used, or sooner if the server restarts;
  • signing out tells your browser to delete everything it saved for Unifiles, including thumbnails;
  • if you turn on “keep available when off” for a folder, its copy is stored in your own cloud account (for example your Google Drive), not by us.

The Unifiles app on your devices only gives access to the folders you choose to share in the app. You can pause sharing or remove a device at any time.

Google user data

If you sign in with Google, we receive your name, email address and profile picture to create and secure your account.

If you connect Google Drive, you grant access to your Drive so that, when you ask, Unifiles can list your folders and files, show previews, download files you open or copy elsewhere, upload files you copy or move into Drive, create folders, and move files to Drive's trash when you delete or move them. We use this access only to provide these features to you.

If you connect Google Photos, Unifiles sees only the photos and videos you pick in Google's own picker, and only to show them and copy them where you ask, for about an hour after you pick them; we can't see the rest of your library. When you choose to copy or move photos and videos into Google Photos, Unifiles uploads those files to your library and puts them in an album called “Unifiles”. We can't change or delete anything else in your Google Photos.

  • We do not sell Google user data, use it for advertising, or use it to train artificial intelligence or machine-learning models.
  • We do not transfer it to others except as needed to provide the service, to comply with law, or as part of a merger or acquisition with notice to you.
  • People at Unifiles do not read it, except with your explicit permission (for example, to help with a support request), when necessary for security, or to comply with law.

Unifiles's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Drive or Google Photos in Unifiles at any time, or remove Unifiles's access from your Google Account permissions.

How we use information

  • to show your storage and files, and to carry out the actions you request (open, copy, move, rename, delete);
  • to keep your account and workspace secure, and to prevent abuse;
  • to run billing for paid plans;
  • to answer your support requests.

Sharing

We don't sell personal information. We share it only with services that run Unifiles for us (our cloud hosting provider), with the storage services you connect (to act on your files there), when the law requires it, or with your consent.

Keeping and deleting information

  • File information for a device or cloud is kept while it's connected. Removing it deletes its file information and access tokens.
  • Temporary relay files for previews are deleted 15 minutes after they were last used. Thumbnails aren't kept by us at all.
  • You can delete your account yourself in Settings → Delete my account. It removes your account, the workspaces only you use with their file information and access tokens, and asks each cloud to withdraw Unifiles's access, straight away. Database backups that still contain it are overwritten within 14 days. If you can't sign in, email faizshaikh.dev@gmail.com from your account's email address and we'll do it within 30 days.

Security

Connections use HTTPS. Cloud access tokens are encrypted, device keys are stored only as fingerprints, passwords are hashed, and the activity log is protected against tampering. Deletions go to the device's or cloud's own trash so they can be undone. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects it.

Children

Unifiles is not meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above and, for important changes, let you know in the app or by email.

Contact

Questions or requests: faizshaikh.dev@gmail.com. See also our terms of service.