Refile Privacy Policy

1. Who We Are

SoftPlex Inc. ("SoftPlex", "we", "our", or "us") is the developer and publisher of the Refile file manager for Android, distributed through Google Play. Our registered business address is in Halifax, Nova Scotia, Canada, with operations in Niigata, Japan, and technical leadership based in Poland, European Union.

SoftPlex Inc. is the data controller for the limited personal information processed in connection with Refile. We are committed to compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), Japan's Act on the Protection of Personal Information (APPI), and the Google Play Developer Program Policies.

For all privacy enquiries, you may reach us at support@softplex.io.

2. Scope of This Policy

This Privacy Policy applies solely to the Refile mobile application for Android (phones, tablets, Chromebooks, and Android TV). It explains what the app accesses on your device, what information leaves your device and why, and the choices available to you. Use of the SoftPlex website (softplex.io) is governed by our separate website Privacy Policy.

3. How the App Works & What It Accesses

Refile is a file manager. To browse, open, copy, move, compress, extract, search, clean up, and organise your files, it needs access to your device's shared storage, and some features read the list of installed apps or app storage statistics.

Data the app creates to run its features is kept locally on your device, in the app's private storage, including:

• Settings, themes and skins, bookmarks, colour tags, recent files, search and media indexes, playlists, and window/tab sessions;
• Saved network locations (SMB, FTP, SFTP, WebDAV) and connected cloud accounts, with their passwords and access tokens encrypted (see §17);
• The Vault: files you move into it are encrypted on the device with a key derived from your vault password; we cannot open them and cannot recover them if you forget the password;
• Safedrop keys and protected files: files you protect are encrypted on the device, and the keys you create stay on it unless you hand one to someone yourself (by QR code, text, or file);
• The Recycle Bin: files you delete are kept on the device until you empty it or they expire;
• Caches for thumbnails and previews.

This local data is removed when you clear the app's data or uninstall the app. Settings backups you create are written to a folder of your choice on your device (by default Documents/Refile/Backups); saved accounts are only ever included in a backup encrypted with a password you choose.

4. Information We Collect

Refile does not ask you to create an account or give us your name, email address, or contact details (you may add an email address to feedback you send, if you want a reply). The information processed falls into the following categories:

Refile does not collect your location, contacts, call logs, messages, or advertising ID, and it shows no advertising. It does not record audio or use the camera itself; QR codes are scanned through Google Play services' code scanner, which returns only the scanned text to the app.

5. How We Use Information

• To provide the app's features — managing your files and the actions you initiate, on the device and on the locations you connect.
• To keep the app stable — crash reports help us find and fix bugs (if you allow it).
• To improve the app — a small set of anonymous events tells us how the Refile Pro offer performs (if you allow it).
• To process purchases — to verify, restore, and honour Refile Pro and its free trial.
• To answer your feedback — reading bug reports, feature ideas, and questions you send, and replying if you included an email address.
• To keep the app up to date — Google Play in-app updates, and occasional requests to rate the app.
• To protect against tampered copies — release builds check which store installed the app.

We do not use your information for advertising or marketing, we do not build profiles of you, and we do not sell or share personal information.

6. Cloud Storage & Network Locations

You can connect Refile to Google Drive, Dropbox, Microsoft OneDrive, and S3-compatible storage (such as AWS S3, Backblaze B2, Cloudflare R2, Wasabi, or MinIO), and to servers on your network or the internet over SMB, FTP, SFTP, and WebDAV, as well as USB drives.

• You sign in to cloud services on the provider's own sign-in page (or Google's account picker). Refile receives an access token, not your cloud password.
• Refile talks to these services directly from your device. Your files, file names, and listings travel only between your device and the provider or server you chose; they never pass through SoftPlex.
• Thumbnails of cloud photos and videos are fetched from the provider and cached on your device.
• Tokens and passwords are stored encrypted on your device and are excluded from Android's cloud backup. Removing an account in Refile deletes its token from the device; you can also revoke access from your Google, Dropbox, or Microsoft account settings.

The provider you connect to processes your data under its own privacy policy (see §11).

Downloads: when you download a file from a web address, Refile connects to that address directly; the website sees the request as it would from any browser.

Subtitles: if you enter your own OpenSubtitles API key and search for subtitles in the video player, the search terms (such as the video's title) are sent to OpenSubtitles.com to find matching subtitles.

7. Google User Data (Google Drive)

When you connect a Google Drive account, Refile asks Google for two permissions:

• https://www.googleapis.com/auth/drive: to see, create, edit, and delete your Google Drive files, so that you can browse, open, stream, upload, download, rename, copy, move, and delete them from within the app, as you direct. As a file manager, Refile needs to reach any file or folder you choose, not only files it created.
• email: your Google account's email address, shown in the app so you can tell connected accounts apart.

Refile uses this access only to provide those user-facing file-management features. It reads, changes, or deletes Drive files only when you ask it to.

What is kept on your device: the access token (encrypted, see §17) and your account's email address, in the app's private storage; cached thumbnails and folder listings, and any files you choose to download. Refile talks to Google Drive directly from your device; Drive data is not transmitted to SoftPlex, and SoftPlex has no server that receives it. It is not shared with third parties, is not used for advertising, is not sold, and is not used to develop, improve, or train artificial-intelligence or machine-learning models. No person at SoftPlex reads your Drive data.

Revoking access and deleting data: removing the account in Refile (Cloud storage) revokes Refile's access with Google and deletes its token from your device. You can also revoke access at any time at myaccount.google.com/permissions. Cached thumbnails are removed when you clear the app's cache; clearing the app's data or uninstalling Refile removes everything it stored. Your files remain in your Google Drive.

Refile's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Sharing Over Your Local Network

Some features turn your device into a server that other devices can reach, only while you have them switched on:

• View on PC — a web file manager served from your device to browsers on your network, over HTTPS with a certificate generated on your device, and protected by a username and password when you set one;
• FTP and SFTP servers — let FTP or SFTP clients on your network access the folders you choose;
• Wi-Fi Direct and nearby transfer — sends files directly to a device you pick;
• Casting — streams a media file from your device to a Chromecast or Google Cast device on your network.

Data exchanged this way goes directly between your devices on your network; it does not pass through SoftPlex. Anyone who can reach the server and knows its credentials can access the shared files while it runs, so please share the address and password only with people you trust, and stop the server when you are done.

9. Usage Statistics & Crash Reports

Refile uses Firebase Crashlytics and Firebase Analytics (Google) behind a single switch: Settings → Privacy & security → Share usage statistics. While it is on, the following is sent:

• Crash reports — the stack trace, app version, device model, OS version, and the app's state at the time of the crash;
• A few product events — for example, that the Refile Pro screen was shown, a trial was started, or a purchase succeeded or was cancelled, together with which Pro feature was involved, and, if a copy of the app was not installed from Google Play, the package name of the app that installed it;
• Standard Firebase data — a random app-instance identifier, approximate country (derived from the IP address, which Google does not log as an identifier for this purpose), app version, and session information.

Turning the switch off stops collection immediately and deletes any crash reports that have not yet been sent. Refile also uses Firebase Remote Config to adjust a few settings without an app update (for example, how often to check for updates, or which cloud services are available); this sends only the app-instance identifier and basic device information.

Send feedback: Settings → About → Send feedback lets you send us a bug report, feature idea, or question. Nothing is sent until you tap Send. The ticket contains your message and its category, an email address only if you enter one, the app version, Android version, device model, and the app's language, so that we can understand and reproduce the issue. It is stored in a Google Firebase (Cloud Firestore) project operated by SoftPlex for app support, using an anonymous Firebase sign-in that gives your copy of the app a random identifier, used only to limit how often tickets can be sent. Feedback contains no files, file names, or other data from your device. We use it only to respond to you and improve our apps, never for marketing.

10. Refile Pro & Purchases

Refile Pro is purchased through Google Play Billing. Google processes your payment; we never receive your card or payment details. The app receives a purchase token and the entitlement status so it can unlock Pro features and restore your purchase. A record that you have used the free trial is kept on your device (and in your Android backup) so that the trial is offered once per user.

11. Third-Party Services

Refile relies on the following third-party services, each governed by its own privacy policy. Services marked "only if you use it" are contacted only when you use the corresponding feature.

• Google Firebase (Crashlytics, Analytics, Remote Config; Cloud Firestore and Authentication for feedback you send) — firebase.google.com/support/privacy
• Google Play services (Play Billing, in-app updates, in-app review, code scanner, Google Sign-In) — policies.google.com/privacy
• Google Drive — only if you use it — policies.google.com/privacy
• Google Cast — only if you use it — policies.google.com/privacy
• Dropbox — only if you use it — dropbox.com/privacy
• Microsoft OneDrive — only if you use it — privacy.microsoft.com/privacystatement
• S3-compatible storage providers (AWS, Backblaze, Cloudflare, Wasabi, or your own server) — only if you use it — under the policy of the provider you choose.
• OpenSubtitles.com — only if you add your API key — opensubtitles.com/en/privacy
• Shizuku, root, and wireless debugging — optional ways you can grant Refile elevated access for privileged file and app operations: Shizuku is an app you install separately, root uses your device's root manager, and wireless debugging pairs Refile with your device's own debugging service. All of these run on your device only; no data is sent off the device through them.

We do not control how these third parties handle information they receive directly. We encourage you to review their policies.

12. Android Permissions

Refile requests the permissions below only for the features described. Special access (such as All files access or Usage access) is granted by you in system settings and can be withdrawn there at any time. Nothing these permissions give the app access to (your files, the list of installed apps, or app usage statistics) is uploaded to SoftPlex, shared with third parties, or used for advertising.

13. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area or the United Kingdom, our legal bases are:

• Performance of a contract — providing the file-management features you use and the Refile Pro purchase you make.
• Consent — feedback you choose to send, and the email address you add to it.
• Legitimate interests — keeping the app stable and secure through crash reports and anonymous product events, which you can switch off at any time (see §9).
• Legal obligation — where processing is required to comply with applicable law, such as tax records held by Google Play.

14. Data Retention

Data stored locally by the app (settings, saved connections, Vault, Recycle Bin, caches) remains on your device until you delete it, clear the app's data, or uninstall the app. Crash reports are kept by Firebase Crashlytics for 90 days; analytics data is kept according to the retention period set in Firebase (no longer than 14 months). Feedback is kept for as long as we need it to respond and to improve the app, and you can ask us to delete it at any time. Purchase records are kept by Google Play according to its policies. Files you store with cloud providers are kept by them under your account with them.

15. Your Rights & Choices

Depending on your jurisdiction (GDPR, PIPEDA, APPI, and similar laws), you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, and to data portability. You can exercise the following controls directly:

• Stop usage statistics and crash reports in Settings → Privacy & security → Share usage statistics.
• Disconnect cloud accounts and saved servers from within the app, and revoke Refile's access from your Google, Dropbox, or Microsoft account settings.
• Withdraw storage, usage, or other permissions in your device's system settings.
• Remove all on-device data by clearing the app's data or uninstalling it.

Because the analytics data we receive is not linked to your name or account, we may need the app-instance identifier to locate it. To make a request, contact support@softplex.io. We will respond within the timeframes required by applicable law. You also have the right to complain to your local data-protection authority.

16. Children's Privacy

Refile is a general-utility tool for a general audience and is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

17. Security

We design Refile to keep your data on your device and protected:

• Saved passwords, cloud tokens, and API keys are encrypted with a key held in the Android Keystore, which never leaves your device, and are excluded from Android cloud backups and device transfers.
• Vault files are encrypted with AES-GCM using a key protected by your vault password.
• Connections to cloud services use TLS; View on PC uses HTTPS. Plain FTP and SMB connections are only as secure as the server you connect to.
• An optional app lock asks for your fingerprint, face, or device screen lock before the app opens.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

18. International Data Transfers

The third-party services listed in §11 may process data on servers outside your country, including in the United States. Where required, these transfers rely on appropriate safeguards such as Standard Contractual Clauses or the EU–US Data Privacy Framework.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, the law, or our practices. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide notice within the app. Continued use of Refile after changes take effect constitutes acceptance of the revised policy.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

SoftPlex Inc.
Halifax, Nova Scotia, Canada
Email: support@softplex.io