Privacy policy

Fileroom is built so that the simplest answer to "what happens to my files?" is also the right one: nothing. Every conversion runs on your device. The app does not upload the files you convert, the results, their names, sizes or any other identifying metadata to any server we control. This page explains the few things the app does send off your device, and what you can do about each of them.

1. Files you convert

Files you pick or share into Fileroom, and the files it produces from them, stay on your device. They live in the app's storage — your library, which you can also browse in the Files app — or wherever you choose to save or share them. Fileroom has no backend that receives, scans or stores your files.

2. Anonymous product analytics (opt-in)

We use PostHog to understand which features are used and which formats are common. It is off by default: the first time you open the app you're asked whether to share anonymous usage, and you can change your answer any time in Settings › Anonymous analytics.

When enabled, Fileroom sends only these kinds of events:

• conversion_started / conversion_completed / conversion_failed — input and output file type, output size in bytes and, on failure, the kind of error. No file names, paths or content.
• paywall_shown / gate_blocked — which feature showed the upgrade screen (for example pdf-compress).
• subscription_started — which plan was bought (monthly, yearly or lifetime). No payment information.

Screen views are not captured, and file names, paths, contents or free-form text are never sent. The complete event list can be audited in the source code — AnalyticsClient.Event on iOS and analytics/Event.kt on Android.

3. Anonymous crash reports (opt-in)

The same setting controls crash reporting through Sentry. When enabled, Sentry receives stack traces and basic device information (OS version, device model, app version) when the app crashes. Personal data collection is switched off, and no file content or names are attached.

4. Purchases

Purchases are processed by Apple (and, on Android, Google) and managed through RevenueCat. RevenueCat receives an anonymous, randomly generated ID so the app can restore your purchase on a new device. We never receive your name, email address or payment details.

5. Permissions

• Photos — only when you pick from your library or save back to it. Photos you don't select are not visible to the app.
• Camera — only for the document scanner. The camera feed stays on your device.
• Files — through the system file picker and the share sheet. Fileroom only sees the files you give it.

6. Data retention

Anonymous analytics and crash data are kept for PostHog's and Sentry's standard retention periods (typically 12 months). To delete data sent before you turned the setting off, write to support@fileroom.app. Because the data is anonymous we can't find your records specifically, so we request a full reset instead.

7. Children

Fileroom is rated for general audiences and does not knowingly collect personal information from anyone, including children under 13.

8. Changes

If we materially change how the app handles your data, we'll update this page and the date at the top. The app will ask for your consent again after a major change.

9. Contact

Questions about anything on this page: support@fileroom.app.

If this page is translated, the English version is the reference.