1. Who we are
Sigarda File Manager ("File Manager" or "the app") is an Android application published by Sigarda, Surabaya, Indonesia ("we", "us"). This policy explains what information the app and this website handle, why, and the choices you have. It applies to the app with package name com.sigarda.filemanager and to filemanager.sigarda.com.
2. Summary
We do not run a server that receives your files or your Google data. File Manager has no user accounts of its own. Your files stay on your device, or travel directly between your device and the services you choose to connect (Google Drive, your own servers, or another phone on your network).
Google Drive data is used only to provide the file-management features you see in the app. It is never sent to us, sold, used for advertising, or used to train AI models.
The app shows ads through Google AdMob, which collects some device data as described in section 5. Ads never receive your files or Google Drive data.
3. Data that stays on your device
To work as a file manager, the app reads and changes files on your device's storage, SD card and USB drives when you ask it to. The following is stored only on your device:
- Your files, including files you move into the Recycle Bin (a hidden
.fm_trashfolder on the same storage volume) and the Vault (encrypted files in a hidden.fm_vaultfolder). - Vault keys. Vault files are encrypted with AES-256-GCM. The master key is wrapped with a key derived from your PIN (PBKDF2-HMAC-SHA256). Your PIN itself is never stored or transmitted, so it cannot be recovered by us or anyone else.
- App settings and lists, such as language, theme, recent files, favourites, pinned folders, search history, the media index cache and video resume positions.
- Connected Google accounts: the email address, display name and profile photo URL of each account you add, so the app can list them.
- Remote server connections (SMB, SFTP, FTP/FTPS, WebDAV): addresses and user names, with passwords and server fingerprints kept in Android's encrypted secure storage.
- Temporary copies used to preview cloud, server or Vault files, kept in the app's private cache and deleted when you close the viewer, when the Vault locks, or the next time the app starts. When you share photos without location, the app shares copies with the GPS data removed (your originals are not changed); those copies are deleted right after sharing.
- Offline Drive files (only if you choose "Make available offline" for a file): a copy is kept in the app's private storage on your device, never in your gallery or shared folders and never on our servers, so it opens without internet. The app asks Google Drive at most once a day whether these files changed. The copies are deleted when you remove them, clear offline files in Settings, remove the Google account from the app, or uninstall the app.
- Text in photos (optional, off by default): if you turn it on, the app reads the text in your photos on your phone using Google Play services' on-device text recognition (ML Kit), so you can search photos by the words in them. Photos and the recognised text never leave your device and are not sent to us or to Google; the text index is kept only in the app's private storage and is deleted when you turn the feature off.
- Automatic rules you create (for example moving old screenshots), their last results, and the settings file you choose to export (it never contains passwords, PINs, Vault data or Google tokens).
- Storage and memory figures. The Storage and Memory screens read, on your phone, the figures Android itself shows in Settings: total and free space, how much space apps and photos, videos and music take, memory in use, and — on Samsung phones — whether RAM Plus (storage used as extra memory) is on and how big it is. The app also listens for Android's "media changed" signal so open lists stay current. The last figures are kept in the app's private storage so they show at once next time. None of this leaves your device.
The app does not include any analytics or crash-reporting SDK of its own, and it does not send file names, file contents or usage statistics to us. Google's SDKs used by the app (AdMob, Play services, and ML Kit when "Text in photos" is on) may send Google anonymous usage and performance information as described in Google's terms.
To help fix problems, the app keeps a small error log on your device (app-private storage, at most about 200 KB). It records technical error details only — never file contents, passwords, PINs or Vault data; file names, e-mail addresses and access keys are removed. The log never leaves your device automatically: it is sent to us only if you choose Settings → Help & feedback → Report a problem and send the e-mail yourself, after you can see exactly what it contains. You can delete the log there at any time.
4. Google user data
Connecting Google Drive is optional. If you choose Cloud → Add account, you sign in with Google and grant the app access. File Manager requests the following:
| Permission (scope) | What it allows | Why File Manager needs it |
|---|---|---|
Basic profile and emailopenid, email, profile | Your name, email address and profile picture | To identify each connected account and show it in the Cloud screen, so you can tell several accounts apart. |
Google Drivehttps://www.googleapis.com/auth/drive | See, edit, create and delete all of your Google Drive files | File Manager is a file manager for your whole Drive: it lists all your folders and files (not only files the app created), and lets you upload, download, open, edit, rename, move to trash and delete them. |
How we use Google user data
Google user data is used only to provide and improve user-facing features that are visible in the app's interface:
- listing folders and files with names, sizes, dates, thumbnails and md5 checksums, and showing each account's storage quota;
- uploading, downloading, opening, previewing, editing text files, renaming, creating folders, moving to the Drive trash and permanently deleting — only as a direct result of your action;
- moving or copying files and folders to another folder of the same Drive (done by Google; nothing is downloaded), renaming several files at once, and downloading a whole folder to your device — only when you ask;
- creating a "share link" for a file when you tap Share link: the app turns on "anyone with the link can view" for that file only and shows you the link; Stop sharing turns it off again. The app never shares a file by itself;
- exporting Google Docs, Sheets and Slides to DOCX, XLSX and PPTX when you download them;
- multiple accounts: showing each connected account's storage space so you can choose where to save a file (the app may suggest the account with the most free space), and showing files from all accounts grouped by account in the optional Clouds view;
- verifying every copy with md5 checksums before any source file is removed.
How Google user data is stored and transferred
- All requests go directly from your device to Google's servers over HTTPS. Sigarda has no server that receives, stores or relays your Google data.
- OAuth access tokens are obtained from Google Play services on your device and kept only in the app's memory. The app does not store refresh tokens or passwords.
- Files you download from Drive are saved to the location you choose on your device (by default the
Downloadfolder). Previews are kept in the app's private cache and deleted as described in section 3. - Account email, name and photo URL are saved in the app's private storage so the account list survives restarts. They are removed when you remove the account or uninstall the app.
Sharing of Google user data
We do not share, transfer or sell Google user data to anyone. Google user data is never shared with advertising networks (including AdMob), data brokers or information resellers, is never used to serve or personalise advertisements, is never used to determine credit-worthiness or for lending purposes, and is never used to develop, improve or train generalised or non-personalised AI and/or ML models. No person at Sigarda reads your Google data.
Limited Use
File Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access
You can disconnect a Google account at any time: in the app, open Cloud, tap the menu next to the account and choose Remove. You can also revoke File Manager's access at myaccount.google.com/connections. Removing access does not delete any files from your Google Drive.
5. Advertising
File Manager is free and shows native ads provided by Google AdMob. Before ads load, the app asks for consent where the law requires it (for example in the EEA, the UK and Switzerland) using Google's User Messaging Platform. You can change your choice at any time in Settings → Ad privacy choices when that option is shown.
AdMob may collect and process, under Google's own privacy policy: your device's advertising ID, IP address (and approximate location derived from it), device and app information, and ad interaction data, in order to deliver, measure and — where you allow it — personalise ads and prevent fraud. You can reset or delete your advertising ID in Android's settings. Learn more at How Google uses information from sites or apps that use its services.
Ads never receive the names or contents of your files, your Vault, your server connections or any Google Drive data.
Purchases and reviews through Google Play
If the app offers an optional one-time purchase to remove ads, it is handled entirely by Google Play Billing: you pay Google, and the app only receives from Google Play, on your device, whether the purchase is valid. We never see your payment details. If the app asks you to rate it, the rating window is Google Play's own in-app review; what you write goes to Google Play, not to us.
6. Network features
- Phone to phone (Wi-Fi). Devices discover each other on your local network and send files directly between them. Nothing goes through the internet or our servers. The receiving phone always has to approve a transfer first.
- Share to computer. The app starts a temporary web server on your phone, reachable only on your local network with a secret link shown as a QR code. It stops when you leave the screen.
- Bluetooth. Files are handed to Android's built-in Bluetooth sharing.
- Remote servers. The app connects directly to the servers you add. Encrypted connections are pinned to the server's identity on first use.
7. Android permissions
| Permission | Used for |
|---|---|
| All files access / storage / media | Showing, copying, moving, renaming and deleting files in every folder you browse, and finding files by category. |
| Internet & network state | Google Drive, remote servers, ads, and checking whether a connection is available. |
| Wi-Fi state & multicast | Finding other phones on the same Wi-Fi for phone-to-phone transfer. |
| Install packages | Installing an APK file only when you tap Install; Android always asks you to confirm. |
| Camera (optional) | Only if you turn on Intruder photo in the Vault settings: after wrong Vault PINs one front-camera photo is taken and kept inside the app (never in your gallery, never uploaded), and shown to you the next time you open the Vault, where you can delete it. |
| Installed apps (apps with a launcher icon, and apps with accessibility, device-admin, notification or SMS access) | The Security check (which apps hold sensitive powers) and backing up an installed app as an APK file. The list is read on the device and never leaves it. |
| Usage access (optional, special access you turn on in Android settings) | The Memory screen (which apps you used recently and how long, so you can close them yourself) and the Storage screen (how much space apps take, like Android's Settings). Read on the device only, never sent anywhere. The app works without it. |
| Notifications, foreground service & wake lock | Showing the progress of copies, transfers and backups, playing music in the background with its controls, and keeping a long transfer running while the screen is off. |
| Biometrics | Unlocking the app or the Vault with your fingerprint or face, if you turn it on. Android handles the biometric check; the app never sees your biometric data. |
8. Sharing and selling of data
We do not sell personal data, and we do not share it with third parties, except the data AdMob processes for advertising as described in section 5. When you choose to share a file with another app, send it to another device or upload it to a server, it goes only where you send it.
9. Security
All connections to Google use HTTPS. The Vault uses authenticated encryption (AES-256-GCM) with a PIN-wrapped key and locks itself when you leave the app. Server passwords are kept in Android's encrypted storage. No method of storage or transmission is perfectly secure, but we design the app so that your data does not need to leave your device in the first place.
10. Retention and deletion
- App data (settings, account list, caches) is deleted when you clear the app's storage or uninstall it.
- The Recycle Bin and Vault live on your storage so that they survive a reinstall. Empty the Recycle Bin and remove files from the Vault in the app before uninstalling if you want them gone.
- Google Drive files stay in your Drive until you delete them. Revoke access as described in section 4 to stop the app's access.
- Because we do not hold your files or Google data on our systems, there is nothing for us to delete on our side. For AdMob data, see Google's controls at myadcenter.google.com.
11. Your rights
Depending on where you live — including under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and the GDPR — you may have rights to access, correct, delete or restrict the processing of your personal data and to withdraw consent. Since the app keeps your data on your device, you can exercise most of these rights directly in the app and in your Google Account. For any question or request, contact us using the details below and we will reply within 30 days.
12. Children
File Manager is a general-audience utility and is not directed at children under 13. We do not knowingly collect personal information from children.
13. This website
This website does not use cookies, analytics or third-party scripts. It remembers your language choice in your browser's local storage. Like any web server, it keeps standard access logs (IP address, time, requested page and browser type) for security and troubleshooting, deleted automatically after 14 days.
14. Changes to this policy
We may update this policy when the app changes. The effective date at the top shows the latest version. If a change affects how Google user data is used, we will show a notice in the app and ask for your consent where required before the change applies.
15. Contact
Sigarda — Surabaya, Indonesia
Email: [email protected]
Website: filemanager.sigarda.com