Legal

Privacy policy

This policy covers the Android app UCA My Files (package de.ucagg.myfiles) and the website myfiles.ucagg.de.

Who is responsible. The operator named in the imprint. Contact: noreply@ucagg.de.

Your files stay on your device

My Files is a file manager. It reads, shows and changes the files on your device because you ask it to. It never uploads your files, file names, folder lists or file contents to us. Files only travel to the servers that you add (SFTP, FTP, SMB, WebDAV) - directly from your device to that server, never through ours.

Server connections: the host names, user names, passwords and private keys you save are stored only on your device, encrypted with a key held in the Android Keystore. We never receive them. Uninstalling the app deletes them.

Permissions: "All files access" (MANAGE_EXTERNAL_STORAGE) lets the app show and manage all files on the shared storage - its core function. "Internet" is used for your own server connections and the check-in below. "Notifications" shows the progress of long copies and new messages from the team. "Run in foreground" keeps a long copy going while you use other apps.

What the app sends to us

• Check-in when you open the app: a random install id created by the app (not linked to your device's hardware, phone number or advertising id), the app version, the Android version, the device class (phone, tablet, TV or Chromebook), the app language and the store it came from. We store only a keyed one-way hash (HMAC) of the install id, plus the date of the first and last opening and a count of openings. Purpose: to count installs and active users and to show you update notes and messages from the team. Legal basis: our legitimate interest in running and improving the app (Art. 6(1)(f) GDPR). No IP address is stored with it.
• Messages inbox: when you open the app it fetches messages from the team for your install and remembers which ones you have read.
• Reports and messages to the developer (only when you send one): your text, the kind (bug, idea, question), an optional reply address, and - only if you tick it - diagnostics (app version, Android version, device model, free storage). Legal basis: your request (Art. 6(1)(b) GDPR).
• Optional UCA ID (only if you sign in): your email address and optional name, to reply to you by email and to show your UCA products in one place. Sign-in codes are stored only as hashes and expire after 15 minutes.

No advertising, no analytics or crash-reporting SDKs, no tracking, no data sales, no sharing with data brokers.

The website

myfiles.ucagg.de counts page views per page and day without storing anything about the visitor (no IP, no cookie, no user agent). If you sign in (admins, or to manage your UCA ID), a session cookie keeps you signed in and a security cookie protects forms. There are no tracking cookies. Our web server keeps short-lived technical logs (IP address, request) for security.

Where data is processed

Our server is rented from IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) and located in an IONOS data centre in Kansas City, USA, so data is processed outside the European Union. The transfer is covered by a data processing agreement with IONOS including the EU Standard Contractual Clauses (Art. 46 GDPR). Emails are sent through IONOS mail servers.

UCA ID (ucagg.de): if you sign in with a UCA ID, your email, name and plan are shared with the UCA account hub run by the same operator.

How long we keep data

• Install data, its inbox and its reports: until you delete them (Settings > Privacy > Delete my data) or automatically 13 months after the app was last opened.
• UCA ID account: until you delete it (in the app, or at myfiles.ucagg.de/delete-data).
• Copies of emails we sent you: in our outbox log, deleted with your account.

Deleting your data

In the app: Settings > Privacy > Delete my data deletes this install's data on our server immediately (and your UCA ID too, if you choose). On the web: myfiles.ucagg.de/delete-data. Uninstalling the app deletes everything on your device.

Children

My Files is a general-audience tool and is not directed at children under 13.

Your rights

You can ask for access to your data, correction, deletion, restriction, data portability, and object to processing (Art. 15-21 GDPR), and you can complain to a data protection supervisory authority. Write to noreply@ucagg.de.

Last updated: 22 October 2026