Privacy Policy
This policy explains how REGHY HUD Backup ("the app") accesses, uses, stores and shares data, including data from Google user accounts. The app is a personal backup tool. It runs on its owner's own computer and is used only with the owner's own Google account.
1. Data the app accesses from Google
The app connects to Google Drive with the OAuth scope https://www.googleapis.com/auth/drive.file. With this scope the app can access only the files and folders that it creates itself. It cannot see, read or change any other file in the Google Drive account.
Through this scope the app:
- creates a backup folder and uploads backup files to it;
- lists the files it created, to check that each backup is complete;
- downloads the files it created, when the owner restores a backup;
- deletes old backup sets that it created, to keep a limited number of copies;
- reads the account's total and used storage, to keep backups within a fixed space budget.
The app does not request access to the user's name, email address, contacts, Gmail, calendar, photos or any other Google service.
2. How the data is used
Data is used only to store, check, rotate and restore the owner's own backups. It is not used for advertising, profiling, analytics, machine-learning training, or any purpose unrelated to backup and recovery.
3. What is stored in Google Drive
- Encrypted backup files. Before upload, all backed-up content is encrypted on the owner's computer with the owner's OpenPGP public key. The matching private key is kept offline by the owner and is not stored on the computer or in Google Drive. Neither Google nor anyone without the owner's private key can read the backed-up content.
- Small unencrypted support files. To make it possible to check and recover a backup, each backup set also contains a manifest, a checksum list and a completion marker. These list dates, component names, file sizes, checksums, the name of the computer and the fingerprint of the public key. A copy of the app and its recovery instructions is also stored. These files contain no backed-up content.
4. What is stored on the owner's computer
The Google OAuth tokens that let the app reach Google Drive are stored in a local configuration file on the owner's computer, readable only by the owner's user account. The app keeps local logs of its own operations (for example, when a backup ran and whether it succeeded). These logs stay on that computer.
5. Sharing and transfer
The app has no servers of its own. Data goes directly from the owner's computer to the owner's Google Drive over an encrypted connection. The app does not sell, rent, share or transfer Google user data, or any other data, to any third party.
REGHY HUD Backup's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Retention and deletion
- Backup sets are kept for a limited time, according to the owner's retention settings. When the app runs its retention step, it deletes the sets that fall outside those settings.
- The owner can delete all backups at any time by deleting the app's backup folder in Google Drive.
- The owner can revoke the app's access at any time at myaccount.google.com/permissions. After that, the app can no longer reach Google Drive. Deleting the local configuration file removes the stored tokens from the computer.
7. Security
Backed-up content is encrypted before it leaves the computer. Integrity is checked with SHA-256 checksums. Connections to Google use HTTPS. Access to Google Drive is limited to the narrowest Drive scope that can do the job (drive.file).
8. Children
The app is not directed to children and is not offered to the public.
9. Changes to this policy
If the way the app handles data changes, this page will be updated and the "Last updated" date above will change.
10. Contact
Questions about this policy: reghy.proyects+contacto@gmail.com.