← Back to Vortex: File Manager Home

Privacy Policy

Application: Vortex: File Manager (Package: com.vortex.filemanager)
Developer: Ilham Sugiri (Indonesia)
Contact Email: ilham.piranha08@gmail.com
Last Updated: October 14, 2026

1. Overview & Privacy Principles

Vortex: File Manager is designed as a secure, decentralized Android file management and network server application. We believe that your personal data and files belong strictly to you. Vortex adheres to strict privacy principles:

❌ Zero Analytics & Telemetry: No Google Analytics, Firebase, or third-party tracking SDKs are bundled.
❌ 100% Ad-Free: No advertising networks, marketing trackers, or sponsored SDKs.
❌ No Proprietary Server Relays: All transfers occur directly on-device or peer-to-peer (P2P). We do not operate external intermediate servers that store, process, or inspect your files.
❌ No Account Creation: The application does not require you to create an account with us.

2. Google User Data Policy & Drive Integration Disclosures

To enable cloud file management, Vortex allows users to optionally connect their Google Drive account. In strict compliance with the Google API Services User Data Policy, including the Limited Use requirements, below are the transparent disclosures detailing how Google user data is handled:

2.1 Data Access Disclosure (What Google User Data is Accessed)

When you explicitly connect your Google account in Vortex, the application requests the OAuth scope https://www.googleapis.com/auth/drive to access:

Account Identity: Your Google account email address solely to identify, label, and distinguish connected accounts in the UI.
File & Folder Metadata: File identifiers, names, MIME types, file sizes, modification timestamps, and thumbnail URLs to render your Google Drive folder hierarchy in the file manager interface.
File Contents: Binary contents of files that you deliberately select to open, stream, download to local storage, or upload from your device to Google Drive.

2.2 Data Use Disclosure (How Google User Data is Used)

Vortex uses Google user data strictly for user-facing file management functionality initiated directly by you. Specifically, user data is used for:

Displaying your Google Drive files and directory structure in the app's dual-pane file explorer.
Downloading files from Google Drive to your device's internal storage or SD card.
Uploading local photos, videos, documents, or archives to your designated Google Drive folders.
Performing user-initiated file operations: creating new folders, renaming files, and deleting files from your Google Drive.
Streaming audio or video files directly to the built-in media player without downloading the entire file to disk first.
Exporting Google Workspace documents (Docs, Sheets, Slides) into standard offline formats (DOCX, XLSX, PPTX, PDF).

Strict Prohibition: Google user data is never used for advertising, marketing, profiling, credit assessment, machine learning training, or any secondary commercial purposes.

2.3 Data Protection Mechanisms (Security for Sensitive Data)

Vortex implements industry-standard security mechanisms to protect your Google data and OAuth credentials:

Hardware-Backed On-Device Encryption: OAuth access tokens and credentials are encrypted at rest using EncryptedSharedPreferences with AES-256 GCM encryption, backed by the Android Keystore system. No plaintext tokens are ever stored on disk.
Encrypted In-Transit Transmission: All communications with Google Drive API endpoints are conducted exclusively over TLS/HTTPS (HTTP/1.1 with modern cipher suites) directly between your Android device and Google's official servers (https://www.googleapis.com/).
No Intermediary Servers: Tokens and files never pass through any proxy, third-party relay, or developer-owned backend server.
Isolated App Sandbox: Tokens and cached metadata reside entirely within Android's private app sandbox, inaccessible to other applications installed on your device.

2.4 Data Retention and Deletion Disclosure

Vortex adheres to strict data minimization, retention, and deletion practices:

Local Retention Only: Authentication tokens and transient file metadata caches remain stored on your device only for as long as your Google Drive account remains linked in the app.
Immediate Deletion via Disconnect: You can disconnect your Google Drive account at any time by tapping the Disconnect / Remove option in the Cloud Storage screen. Doing so immediately and permanently purges all OAuth tokens, cached file sizes, and directory listings from your device's encrypted storage.
Uninstall Deletion: Uninstalling the Vortex application permanently wipes all stored tokens, credentials, and app cache automatically via the Android OS.
Third-Party Revocation: You can revoke Vortex's access to your Google account at any moment through Google's official security dashboard at https://myaccount.google.com/permissions. Once revoked, all subsequent API requests from the app will be immediately invalidated and rejected by Google.

2.5 Limited Use Statement

Vortex: File Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Android Permissions Justification

Vortex requests the following Android permissions strictly when needed to perform user-requested actions:

MANAGE_EXTERNAL_STORAGE: Required by file manager applications on Android 11+ to browse, copy, move, rename, delete, and organize files across internal storage and SD cards.
INTERNET: Required exclusively to communicate directly with official cloud APIs (Google Drive, Dropbox, OneDrive, pCloud, Yandex) and to run local network server protocols (FTP, SFTP, WebDAV, HTTP).
ACCESS_WIFI_STATE / CHANGE_WIFI_STATE: Used to maintain Wi-Fi connectivity and WakeLock during active file transfers and local server hosting.
FOREGROUND_SERVICE: Keeps background file transfers, downloads, and local servers running uninterrupted when the app is minimized.
USE_BIOMETRIC: Protects local Safe Folder access using on-device biometric fingerprint or PIN authentication.
NEARBY_WIFI_DEVICES / ACCESS_FINE_LOCATION: Required by Android OS solely for Wi-Fi Direct peer discovery during Near-Drop wireless transfers. Physical GPS location data is never accessed, tracked, or stored.

4. Third-Party Sharing

Vortex does NOT share, sell, rent, or trade your personal data, files, or credentials with any third parties, advertisers, or data brokers under any circumstances.

5. Children's Privacy

Vortex does not knowingly collect or solicit any personal information from children under the age of 13. The application is a neutral file management utility.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any revisions will be published on this page with an updated "Last Updated" date. We encourage users to periodically review this page for any changes.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact the developer directly at:

Developer: Ilham Sugiri
Email: ilham.piranha08@gmail.com
GitHub: https://github.com/ilhampiranha08-tech
Location: Indonesia