Privacy policy

This policy covers the mk-drive iPhone app and the mk-drive web app. The short version: the app talks only to the drive you point it at, and nobody else sees anything.

Who runs the drive

mk-drive is software you, or someone you trust, install on your own machine. The person who runs that machine is the operator of your drive and holds your files and your account. This policy describes what the software does; the operator's own rules apply on top of it. If you are the operator, you are the only party involved.

What the iPhone app stores on your phone

• The address of your drive, your email, and an app password — kept in the iOS Keychain. The app password is a token your drive issued to this phone; you can revoke it on the drive at any time under Settings, Devices.
• Files you open or download, in the app's own storage, so they open again without a network. Deleting the app deletes them.
• Uploads waiting to be sent, until they are sent.

Nothing on the phone is sent anywhere except to your drive.

What the app sends, and where

Every request goes to your own drive over HTTPS. There are no analytics, no advertising identifiers, no crash-reporting service and no third-party servers. The app does not use your location, contacts, microphone or camera; it reads a photo or a file only when you choose to upload it.

Crash reports reach the author only if you have turned on sharing them with app developers in iOS Settings, and then only through Apple, in the form Apple provides.

What the drive keeps

The drive keeps, on the machine it runs on:

• Your account: email, display name, a hash of your password, your role.
• Sessions and app passwords: which devices are signed in, when they were last seen, from which address.
• An activity log: sign-ins, uploads, deletions, share links made and removed, with the time and the address they came from. The operator sees it under Settings, Activity.
• Your files, exactly where they were: the drive does not copy or index them into a database. Thumbnails it renders are a cache and can be deleted at any time.
• Stars, recent files and share links, so they are there on your next visit.

Files you delete go to the drive's trash first and can be restored; emptying the trash removes them for good. A public share link stays public until it expires or is removed.

Removing your data

Revoke a phone under Settings, Devices, and it can no longer reach the drive. Delete the app and everything it kept on the phone goes with it. To remove your account and its files ask the operator; an operator removes people under Settings, People. If you are the operator, the drive's data lives in the data directory you mounted and in the locations you pointed it at; remove those and nothing remains.

Changes and contact

When this policy changes, the date above changes with it. Questions about the software go to its author: open an issue on GitHub or write through mateuszkornas.com. Questions about your files and your account go to the operator of your drive.