This policy covers MK Drive, the mk-drive app for iPhone and iPad, and the mk-drive web app. It is written so that the App Store privacy label and this page say the same thing: the app collects nothing for the author.
Who runs the drive
mk-drive is software you, or someone you trust, install on your own machine. The person who runs that machine is the operator of your drive and holds your files and your account. This policy describes what the software does; the operator's own rules apply on top of it. If you are the operator, you are the only party involved.
The author of the software has no access to any drive, any account or any file. There is no central service and no account with the author.
What the app stores on your phone
- The address of your drive, your email, and an app password, kept in the iOS Keychain so the app and its Files extension can sign in. The app password is a token your drive issued to this phone; you can remove it on the drive at any time under Settings, Devices. Your real password is never stored on the phone.
- A list pairing file paths with identifiers, which the Files app needs to tell files apart. It holds names and paths, not contents.
- Temporary copies of files you open, in the app's own storage. Deleting the app deletes them.
- Thumbnails, in memory only while the app runs.
Nothing is synced ahead of time and nothing is indexed: folders are listed when you open them and files are downloaded when you open them.
What the app sends, and where
Every request goes to your own drive, over HTTPS unless you chose a plain address on your home network. Your email and password travel once, to make the app password; from then on the app password goes with every request, together with the files and folders you browse, open, upload, rename, move or delete. There are no analytics, no advertising identifiers, no crash-reporting service and no third-party servers. The app does not use your location, contacts, microphone or camera. It reads a file only when you choose to upload it, and only that one.
Crash reports reach the author only if you have turned on sharing them with app developers in iOS Settings, and then only through Apple, in the form Apple provides. They contain no file names and no account details.
What the drive keeps
The drive keeps, on the machine it runs on:
- Your account: email, display name, a hash of your password, your role.
- Sessions and app passwords: which devices are signed in, when they were last seen, from which address.
- An activity log: sign-ins, uploads, deletions, share links made and removed, with the time and the address they came from. The operator sees it under Settings, Activity.
- Your files, exactly where they were. The drive does not copy or index them into a database. Thumbnails it renders are a cache and can be deleted at any time.
- Stars, recent files and share links, so they are there on your next visit.
Files you delete go to the drive's trash first and can be restored; emptying the trash removes them for good. A public share link made in the web app stays public until it expires or is removed.
Removing your data
- A phone you no longer have: remove its app password under Settings, Devices on the drive and it can no longer reach anything.
- The app: sign out, then delete it. Deleting alone removes the files it kept; signing out first removes the Keychain entry with the app password too. A phone that was not signed out can still be cut off on the drive, as above.
- Your account and files: the app creates no accounts of its own; accounts are made by the operator on the drive, and the operator removes them under Settings, People. If you are the operator, the drive's data lives in the data directory you mounted and in the folders you pointed it at; remove those and nothing remains.
Children
The app is not directed at children and collects no data from anyone.
The App Store privacy label
The listing says Data Not Collected. That is the label for the developer, and it is accurate: the author receives nothing. The data the app handles goes only to a server you chose, run by you or by someone you know. Apple's own processing of the purchase and of any crash report you opted into is covered by Apple's privacy policy.
Changes and contact
When this policy changes, the date above changes with it. Questions about the software go to its author at the address below. Questions about your files and your account go to the operator of your drive.
Write to the author
Questions, bugs and requests about mk-drive go to one address, read by the person who made it. Questions about your own files and your account go to whoever runs your drive.