FileTrail stores your documents on your device. We do not collect, read, or sell your documents. If you don't enable cloud sync, your data never leaves your phone. Full stop.
Who we are
FileTrail is developed and operated by Rushing Technologies. For privacy-related questions, contact us at [email protected].
Data stored locally on your device
The following is stored exclusively on your device and never transmitted to our servers unless you explicitly enable cloud sync:
- Document files (images, PDFs)
- Document metadata (title, category, tags, dates)
- OCR-extracted text
- Folders and organisational structure
- App settings and preferences
Data we collect — before you subscribe
FileTrail is free to download. Before you subscribe to Pro, we require no account and no document data — subscribing is required to save or manage documents. We may still collect the anonymised analytics described in Section 5, and if you use a feature that requires a network connection (such as AI suggestions), we may receive the minimum data necessary to perform that specific function. We do not retain that request data beyond the duration of the request.
Data we collect — Pro tier with cloud sync
When you enable Pro cloud sync, we store the following on our servers in encrypted form:
- Account credentials — email address and a hashed password. We never store passwords in plain text.
- Encrypted document data — your documents are encrypted on your device before upload. We cannot read the contents of your documents.
- Sync metadata — timestamps and sync version numbers required to keep your devices in sync.
- Billing information — handled entirely by our payment processor (Stripe). We never see or store your full card details.
Analytics
We collect anonymised, aggregated analytics to understand how the app is used — for example, which features are most popular. These events contain no personally identifiable information and no document content. You can opt out of analytics in the app's Settings screen at any time.
Analytics data we may collect includes: app opened, feature used, error type. We do not track your location, contacts, or any data outside the app.
Push notifications
If you enable notifications, your device's push token is stored on our servers solely to deliver notifications you have requested (such as backup reminders). You can revoke notification permission at any time through your device settings.
Cookies and tracking
The FileTrail mobile app does not use cookies. This website uses no third-party tracking scripts. We do not use Google Analytics, Facebook Pixel, or any advertising trackers.
Third-party services
We use the following third-party services:
- Stripe — payment processing for Pro subscriptions. Subject to Stripe's Privacy Policy.
- Apple / Google — app distribution and in-app purchases. Subject to their respective privacy policies.
- Railway — cloud infrastructure for the sync backend. Data is stored within Railway's infrastructure.
We do not sell or share your data with advertisers, data brokers, or any other third parties.
Data retention
Local data is retained on your device until you delete it or uninstall the app. Cloud sync data is retained while your Pro subscription is active. After cancellation, your cloud data is deleted within 90 days. You can request immediate deletion at any time by contacting us.
Your rights
Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws including:
- The right to access the data we hold about you
- The right to delete your account and all associated data
- The right to export your data in a portable format
- The right to opt out of analytics
To exercise any of these rights, contact us at [email protected].
Children's privacy
FileTrail is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Security
We take security seriously. Local documents are protected by your device's security (including biometric lock). Cloud sync data is encrypted end-to-end before leaving your device. Our backend infrastructure is protected with industry-standard security practices. Despite these measures, no system is perfectly secure — we encourage you to use a strong PIN and enable biometric lock.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes through the app or by email if you have an account. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Contact Rushing Technologies at [email protected].