Privacy Policy

Save2Folder ("we", "our", or "the app") is an Android photo organization application developed by Manish, an independent developer based in Nepal. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use Save2Folder.

By using Save2Folder, you agree to the collection and use of information as described in this Privacy Policy.

2.1 Information You Provide Directly

• Photos and media: Photos you capture or import using the application.
• Folder structure: Folder names, hierarchies, and custom organization rules you create within the app.
• PIN code for folder lock: Stored locally using encrypted secure storage on your device; never transmitted to any external server or third party.

2.2 Google Account Information (Google Drive users only)

When you choose to enable Google Drive storage mode, Save2Folder requests access to your Google account with the following OAuth scope:

The app cannot access any pre-existing files or other directories in your Drive. We receive and store on your device:

• Your Google account email address (displayed strictly in app Settings)
• Your Google display name
• OAuth access tokens (stored securely on-device, used only to authenticate Drive API calls)

2.3 Automatically Collected Information

• Device storage permissions to read and write photos in internal or DCIM directories
• Camera hardware permission to capture photos within the folder-first workflow
• Save2Folder itself does not collect telemetry, analytics, crash reports, or user profiling metrics

2.4 Advertising (Free Version Only)

The free version of Save2Folder displays advertisements served by Google AdMob. AdMob may collect device identifiers and usage data as described in Google's Privacy Policy. The ad-free version displays no advertisements and does not load advertising SDKs.

3.1 Photos and Folder Data

• Stored locally on your physical device.
• If Google Drive mode is enabled, uploaded directly to your own Google Drive account under a dedicated folder named "Save2Folder" created on your behalf.
• We do not access, view, or store your photos on any servers we operate.

3.2 Google User Data

We use your Google account data solely to:

• Authenticate your direct Google Drive connection
• Create and manage folder hierarchies inside your personal Google Drive on your behalf
• Upload photos from the app to your designated Google Drive folder
• Display your connected account email in the app Settings screen

Save2Folder's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the drive.file scope, which strictly restricts access to files created by Save2Folder.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read your Google user data unless you have given explicit consent, it is necessary for security purposes, or it is required by law.
• We do not use or transfer Google user data for any purpose not described in this Privacy Policy.

• Local Storage: All photos and organizational hierarchies reside locally on your device storage.
• PIN Protection: PIN codes are stored using Android's encrypted hardware-backed secure storage (flutter_secure_storage) and are never transmitted over network protocols.
• Token Security: Google OAuth tokens are kept securely on-device in encrypted storage and refreshed directly with Google endpoints.
• Zero Server Footprint: We operate no external databases or servers storing personal files or images.
• Drive Security: Drive-synced photos reside exclusively in your personal Google Drive account, governed by Google's industry-standard privacy and encryption protocols.

Disconnecting or uninstalling: If you disconnect Google Drive in the app or uninstall Save2Folder, local OAuth tokens and session data on your device are cleared. This does not delete the Save2Folder folder or photos already stored in your Google Drive. Those files remain in your Drive account until you delete them directly in Google Drive or through the app's folder browser while still connected.

We do not sell, trade, rent, or share your personal information with third parties, with the following standard operational exceptions:

• Google Drive API: When you voluntarily activate Google Drive sync, photos and directory names are transmitted directly to your personal Google Drive storage.
• Google AdMob: For free-tier users only, AdMob serves non-personalized or personalized ads subject to Google's Ad policies.
• Legal Requirements: Disclosures strictly mandated under applicable law or valid judicial process.

You maintain complete sovereignty over your data and can exercise control at any moment:

• Revoke Google Access: Revoke Save2Folder's access at any time from your Google Account security settings at myaccount.google.com/permissions.
• Disconnect Drive In-App: Tap "Disconnect" in the Save2Folder Settings screen to immediately clear local session tokens. This removes the app's ability to sync with Drive but does not delete your Save2Folder folder or photos in Google Drive.
• Total Local Deletion: Delete all local photos, configurations, and app databases by uninstalling the application from your Android device. Uninstalling also clears on-device OAuth tokens but does not remove content already uploaded to Google Drive.
• Cloud Management: Modify or purge photos directly inside your Google Drive or through the app's folder browser while connected.
• Security Credentials: Remove or update the folder lock PIN at any time within app settings.

Data Retention

Your Google account email, display name, and OAuth tokens are stored only on your device and are retained until you disconnect Google Drive in the app, revoke access in your Google Account settings, or uninstall the app. We do not retain Google user data on servers we operate. To request deletion of any information held by the developer (for example, email correspondence you have sent to us), contact save2folder@gmail.com.

Save2Folder is not directed at children. We do not knowingly collect personal information from children under the age of 13, or under the applicable digital age of consent in the user's jurisdiction (such as 16 in parts of the European Union). If you believe a child has provided us with personal data, please contact us immediately so we can facilitate its removal.

We may update this Privacy Policy from time to time as features expand. We will notify users of notable changes by revising the "Last updated" date at the top of this document. Continued use of Save2Folder following any modifications constitutes your explicit acceptance of the revised terms.

If you have questions, feedback, or concerns regarding this Privacy Policy or our security practices, feel free to get in touch: