1. Who we are
File Manager ("the app") is an Android application published by Sigarda, Surabaya, Indonesia ("we", "us"). This policy explains what information the app and this website handle, why, and the choices you have. It applies to the app with package name com.sigarda.filemanager and to filemanager.sigarda.dev.
2. Summary
We do not run a server that receives your files or your Google data. File Manager has no user accounts of its own. Your files stay on your device, or travel directly between your device and the services you choose to connect (Google Drive, your own servers, or another phone on your network).
Google Drive data is used only to provide the file-management features you see in the app. It is never sent to us, sold, used for advertising, or used to train AI models.
The app shows ads through Google AdMob, which collects some device data as described in section 5. Ads never receive your files or Google Drive data.
3. Data that stays on your device
To work as a file manager, the app reads and changes files on your device's storage, SD card and USB drives when you ask it to. The following is stored only on your device:
- Your files, including files you move into the Recycle Bin (a hidden
.fm_trashfolder on the same storage volume) and the Vault (encrypted files in a hidden.fm_vaultfolder). - Vault keys. Vault files are encrypted with AES-256-GCM. The master key is wrapped with a key derived from your PIN (PBKDF2-HMAC-SHA256). Your PIN itself is never stored or transmitted, so it cannot be recovered by us or anyone else.
- App settings and lists, such as language, theme, recent files, favourites, pinned folders, search history, the media index cache and video resume positions.
- Connected Google accounts: the email address, display name and profile photo URL of each account you add, so the app can list them.
- Remote server connections (SMB, SFTP, FTP/FTPS, WebDAV): addresses and user names, with passwords and server fingerprints kept in Android's encrypted secure storage.
- Temporary copies used to preview cloud, server or Vault files, kept in the app's private cache and deleted when you close the viewer, when the Vault locks, or the next time the app starts.
The app does not include any analytics or crash-reporting SDK, and it does not send file names, file contents or usage statistics to us.
4. Google user data
Connecting Google Drive is optional. If you choose Cloud → Add account, you sign in with Google and grant the app access. File Manager requests the following:
| Permission (scope) | What it allows | Why File Manager needs it |
|---|---|---|
Basic profile and emailopenid, email, profile | Your name, email address and profile picture | To identify each connected account and show it in the Cloud screen, so you can tell several accounts apart. |
Google Drivehttps://www.googleapis.com/auth/drive | See, edit, create and delete all of your Google Drive files | File Manager is a file manager for your whole Drive: it lists all your folders and files (not only files the app created), and lets you upload, download, open, edit, rename, move to trash and delete them. Cloud Pool stores and reads files in a "File Manager Pool" folder. |
How we use Google user data
Google user data is used only to provide and improve user-facing features that are visible in the app's interface:
- listing folders and files with names, sizes, dates, thumbnails and md5 checksums, and showing each account's storage quota;
- uploading, downloading, opening, previewing, editing text files, renaming, creating folders, moving to the Drive trash and permanently deleting — only as a direct result of your action;
- exporting Google Docs, Sheets and Slides to DOCX, XLSX and PPTX when you download them;
- Cloud Pool: choosing which of your connected accounts receives a new file, splitting a file that is too large for a single account into parts and joining them back when you download it, and verifying every copy with md5 checksums before any source is removed.
How Google user data is stored and transferred
- All requests go directly from your device to Google's servers over HTTPS. Sigarda has no server that receives, stores or relays your Google data.
- OAuth access tokens are obtained from Google Play services on your device and kept only in the app's memory. The app does not store refresh tokens or passwords.
- Files you download from Drive are saved to the location you choose on your device (by default the
Downloadfolder). Previews are kept in the app's private cache and deleted as described in section 3. - Account email, name and photo URL are saved in the app's private storage so the account list survives restarts. They are removed when you remove the account or uninstall the app.
Sharing of Google user data
We do not share, transfer or sell Google user data to anyone. Google user data is never shared with advertising networks (including AdMob), data brokers or information resellers, is never used to serve or personalise advertisements, is never used to determine credit-worthiness or for lending purposes, and is never used to develop, improve or train generalised or non-personalised AI and/or ML models. No person at Sigarda reads your Google data.
Limited Use
File Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access
You can disconnect a Google account at any time: in the app, open Cloud, tap the menu next to the account and choose Remove. You can also revoke File Manager's access at myaccount.google.com/connections. Removing access does not delete any files from your Google Drive.
5. Advertising
File Manager is free and shows native ads provided by Google AdMob. Before ads load, the app asks for consent where the law requires it (for example in the EEA, the UK and Switzerland) using Google's User Messaging Platform. You can change your choice at any time in Settings → Ad privacy choices when that option is shown.
AdMob may collect and process, under Google's own privacy policy: your device's advertising ID, IP address (and approximate location derived from it), device and app information, and ad interaction data, in order to deliver, measure and — where you allow it — personalise ads and prevent fraud. You can reset or delete your advertising ID in Android's settings. Learn more at How Google uses information from sites or apps that use its services.
Ads never receive the names or contents of your files, your Vault, your server connections or any Google Drive data.
6. Network features
- Phone to phone (Wi-Fi). Devices discover each other on your local network and send files directly between them. Nothing goes through the internet or our servers. The receiving phone always has to approve a transfer first.
- Share to computer. The app starts a temporary web server on your phone, reachable only on your local network with a secret link shown as a QR code. It stops when you leave the screen.
- Bluetooth. Files are handed to Android's built-in Bluetooth sharing.
- Remote servers. The app connects directly to the servers you add. Encrypted connections are pinned to the server's identity on first use.
7. Android permissions
| Permission | Used for |
|---|---|
| All files access / storage / media | Showing, copying, moving, renaming and deleting files in every folder you browse, and finding files by category. |
| Internet & network state | Google Drive, remote servers, ads, and checking whether a connection is available. |
| Wi-Fi state & multicast | Finding other phones on the same Wi-Fi for phone-to-phone transfer. |
| Install packages | Installing an APK file only when you tap Install; Android always asks you to confirm. |
8. Sharing and selling of data
We do not sell personal data, and we do not share it with third parties, except the data AdMob processes for advertising as described in section 5. When you choose to share a file with another app, send it to another device or upload it to a server, it goes only where you send it.
9. Security
All connections to Google use HTTPS. The Vault uses authenticated encryption (AES-256-GCM) with a PIN-wrapped key and locks itself when you leave the app. Server passwords are kept in Android's encrypted storage. No method of storage or transmission is perfectly secure, but we design the app so that your data does not need to leave your device in the first place.
10. Retention and deletion
- App data (settings, account list, caches) is deleted when you clear the app's storage or uninstall it.
- The Recycle Bin and Vault live on your storage so that they survive a reinstall. Empty the Recycle Bin and remove files from the Vault in the app before uninstalling if you want them gone.
- Google Drive files stay in your Drive until you delete them. Revoke access as described in section 4 to stop the app's access.
- Because we do not hold your files or Google data on our systems, there is nothing for us to delete on our side. For AdMob data, see Google's controls at myadcenter.google.com.
11. Your rights
Depending on where you live — including under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and the GDPR — you may have rights to access, correct, delete or restrict the processing of your personal data and to withdraw consent. Since the app keeps your data on your device, you can exercise most of these rights directly in the app and in your Google Account. For any question or request, contact us using the details below and we will reply within 30 days.
12. Children
File Manager is a general-audience utility and is not directed at children under 13. We do not knowingly collect personal information from children.
13. This website
This website does not use cookies, analytics or third-party scripts. It remembers your language choice in your browser's local storage. Like any web server, it keeps standard access logs (IP address, time, requested page and browser type) for security and troubleshooting, deleted automatically after 14 days.
14. Changes to this policy
We may update this policy when the app changes. The effective date at the top shows the latest version. If a change affects how Google user data is used, we will show a notice in the app and ask for your consent where required before the change applies.
15. Contact
Sigarda — Surabaya, Indonesia
Email: hanyawahyusaja@gmail.com
Website: filemanager.sigarda.dev