xFiles Privacy Policy
Last updated: 16 July 2026
Introduction
This Privacy Policy explains how xFiles, developed and provided by SR Apps, collects, uses, stores and protects information when you use the Android application. xFiles only accesses information necessary to provide the features you choose to use.
Information We Collect
Depending on the features you use, xFiles may process the following information:
- Files and folders you choose to browse or manage.
- Your Google account email address when you voluntarily connect Google Drive.
- Google Drive metadata, files and folders needed to perform actions you request.
- App preferences stored locally on your device.
- Google Play purchase status needed to unlock or restore premium features.
- Crash diagnostics or analytics, if enabled, to improve app stability and performance.
Crash diagnostics or analytics do not intentionally include the contents of your personal files unless you explicitly provide such information in a support request.
Files and Storage Data
xFiles accesses files and folders only when needed to provide features you choose, including browsing, searching, opening, copying, moving, renaming, deleting, organising, compressing, extracting, analysing storage, identifying duplicate or large files, using gallery tools, vault functions, local backups, and supported local or network transfers.
Processing is performed on your device unless a feature you choose requires communication with an external service.
How We Use Information
Information processed by xFiles is used only to:
- Provide file-management and storage features requested by you.
- Provide Google Drive functionality after you connect your account.
- Restore or verify Google Play purchases.
- Remember app settings and preferences.
- Improve app reliability, stability and security.
- Respond to support and privacy requests.
xFiles does not use personal information or Google user data for advertising, personalised advertising, marketing, profiling, credit decisions, AI model training, or purposes unrelated to the app's user-facing functionality.
Google Drive Data
When you choose to connect Google Drive, xFiles uses Google OAuth 2.0 with PKCE to authenticate your Google account securely.
After you grant permission, xFiles may use Google Drive data to:
- Browse and search Drive files and folders.
- Upload and download files.
- Create folders.
- Rename, move, copy and delete Drive files and folders.
- Display your Google account email address to identify the connected account.
Google user data is accessed only after you actively sign in and explicitly grant permission. xFiles does not access Google Drive data unless you choose to connect your account, and it uses that data only to provide the Drive features you request.
Sharing and Disclosure of Google User Data
SR Apps does not sell, rent or trade Google user data or personal information.
Google user data is disclosed only:
- When necessary to perform a feature you explicitly request.
- When required by applicable law, legal process or a valid government request.
- When reasonably necessary to protect users, the public, SR Apps or legal rights.
Google Drive content is transmitted securely between your device and Google using Google's official Google Drive APIs over encrypted HTTPS/TLS connections.
Protection of Sensitive Data
xFiles uses technical safeguards that include:
- Google OAuth 2.0 authentication.
- PKCE (Proof Key for Code Exchange).
- HTTPS/TLS-encrypted network communication.
- Android security-backed encrypted storage for OAuth tokens where supported.
- No embedded OAuth client secret in the Android application.
Although reasonable safeguards are used, no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure.
Data Retention and Deletion
Google Drive access and refresh tokens remain on your device only while the account is connected or as needed to maintain the connection.
You may:
- Disconnect your Google account from within xFiles.
- Remove locally stored account credentials.
- Revoke xFiles access through your Google Account security settings.
- Clear app data or uninstall xFiles to remove locally stored app information.
Files created, changed or deleted in Google Drive remain subject to Google's own retention, deletion and recovery controls.
Android Permissions
Depending on the features you choose, xFiles may request storage, photos and media, notification, camera or network-related permissions. Permissions are requested only when needed for the selected feature.
You may review or withdraw permissions in Android Settings. Withdrawing a permission may prevent the related feature from working.
Local Vault and Backups
Vault, backup and restore features operate only on content you select. You are responsible for protecting your device, backup locations, vault credentials and recovery information.
SR Apps cannot recover encrypted or locally protected content if required credentials or backups are lost.
Third-Party Services
xFiles may rely on services provided by Google, including Google Drive APIs, Google OAuth, Google Play Services and Google Play Billing. Those services process information under their own terms and privacy policies.
Your Choices and Rights
You may:
- Choose whether to connect Google Drive.
- Disconnect Google Drive at any time.
- Revoke Google permissions through your Google Account.
- Withdraw Android permissions through device settings.
- Delete local app data or uninstall the app.
- Contact SR Apps with a privacy question or request.
Children's Privacy
xFiles is not directed to children under 13, and SR Apps does not knowingly collect personal information from children through the application. If you believe a child has provided personal information, please contact SR Apps.
Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect legal requirements, product changes or new features. Changes will be published on this page with a revised “Last updated” date.
Contact
SR Apps
Email: id1224444@gmail.com
xFiles' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.