Privacy Policy

Effective date: November 4, 2026

Orange Files is an Android file manager with integrated document, spreadsheet, media and e-book features. Google Drive connection is optional. This policy explains how the app handles information when you use it.

Information accessed

Orange Files accesses local files and folders as needed for the file-management actions you choose. When you connect Google Drive, Orange Files requests the https://www.googleapis.com/auth/drive permission, which allows viewing, creating, editing and deleting files in your Google Drive. This broad permission is used to provide file-manager functionality across your Drive, including folders and files not created by Orange Files. Actions such as saving, moving and deleting files are initiated through app features.

Google account authorization

Sign-in takes place using Google's browser-based authorization flow. An authentication service hosted on Cloudflare Workers exchanges authorization codes and refresh tokens with Google's OAuth service and returns the resulting authorization tokens to the Android app. This service necessarily processes tokens in transit. The Android app stores authorization credentials locally using encryption backed by Android Keystore. Never send your password to Orange Files support.

How Google Drive data is used

The Android app communicates with Google Drive APIs to list folders, retrieve files and save changes. The authentication Worker is not used as a document storage or file-transfer server for these operations. Google Drive data is used to provide the user-requested file-management and editing features, not for advertising, profiling or selling data. Orange Files does not transfer Google user data to advertising networks.

Limited Use

Orange Files' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access to Google data is limited to delivering or improving user-facing features requested by the user, security, compliance with law, and other uses permitted by that policy. Google user data is not used to serve advertisements.

Third-party infrastructure and technical records

Google provides authentication and Drive storage; Cloudflare hosts the OAuth authentication service and this website. Cloudflare and Google may process technical network information according to their own policies. Application-level Workers Logs have been disabled for the authentication Worker, but this does not mean all infrastructure-level technical records are absent. The authentication service is not intended to maintain a database of user files or OAuth tokens.

Storage, retention and deletion

Files you create or edit are stored in locations you select, including local device storage or your Google Drive. Locally stored account authorization information remains until it is removed through the app's account controls, app data is cleared, or the app is uninstalled, subject to Android behavior. Google Drive files remain in your Google account unless you modify or delete them. To revoke access, disconnect your account in Orange Files and/or use Google Account connections. Revocation does not automatically delete files in your Google Drive. Technical records retained by infrastructure providers are subject to their applicable retention practices.

Security

Orange Files uses encrypted HTTPS connections for Google and authentication-service communications and Android Keystore-backed encryption for locally stored authorization credentials. No method of storage or transmission can guarantee absolute security.

Children and updates

Orange Files is a general-purpose file utility, not designed specifically for children. This policy may be updated when features or data practices change; the effective date will be revised accordingly.

Contact

For privacy questions or requests, email [email protected].