FilomeIn short
- Your documents are kept on your phone. We never see them.
- If you use cloud backup, your documents are locked on your phone with your own key before they are sent. Our server keeps only the locked copy and cannot open it.
- For an account we keep your e-mail address, your plan, and what is needed to run the account and the backup.
- No advertising, no tracking, no selling of data. Filome has no analytics or advertising code in it.
Who we are
Filome is provided by [Legal name of the business], [registered address], India ("we", "us"). We are responsible for the information described here (the "data fiduciary" or "controller").
On your phone
Everything you keep in Filome is stored in Filome's own storage on your phone: your documents and their pictures and files, vault and category names, notes, the names you give, the history of what you shared, and a log of what happened in the app. None of this is sent to us.
It leaves your phone only when you choose to:
- Sharing sends the files you choose to the app you choose (for example WhatsApp or e-mail). What that app does with them is governed by its own policy.
- A backup file is written where you choose to save it, locked with your passphrase.
- Cloud backup, if you turn it on, is described below.
- Printing hands the document to your phone's printing system and your printer.
What reaches our server
Only if you sign in to an account (for cloud backup or a paid plan):
| What | Why |
|---|---|
| Your e-mail address | To identify your account and send you sign-in codes. |
| Sign-in codes and session tokens | To sign you in. Stored only as one-way fingerprints, never as the codes or tokens themselves. |
| The name of your phone model | To keep your account on one phone at a time and tell you where you were signed out from. |
| Your plan and add-ons, and purchase confirmations from Google Play or the App Store | To give you what you paid for. |
| Your locked backup: locked files, a locked index, their sizes and fingerprints, and counts (how many documents, vaults and pages) | To keep and return your backup and apply your plan's storage limit. We cannot read the contents, names or pictures. |
| Your cloud key, locked with your passphrase and your recovery key | So you can restore on a new phone. We cannot unlock it. |
| Network (IP) address and time of requests | To keep the service safe (limits on sign-in attempts) and to find faults. |
We do not ask for your name, phone number, address or any document number, and we do not receive them.
Why we use it
We use this information only to provide the account, sign-in, cloud backup and paid plans you asked for, to keep the service secure, and to answer you when you contact us. We process it on the basis of your consent, which you give when you sign in and turn on cloud backup, and which you can withdraw at any time by deleting your account.
We do not sell or rent personal data, and do not use it for advertising or profiling.
Who else is involved
We use these providers to run the service. They act on our instructions and may only use the data to provide their service to us:
- Amazon Web Services: the server and its storage, in the Mumbai region, and sending sign-in e-mails (Amazon SES).
- Zoho: our support e-mail, when you write to us.
- Google Play and Apple App Store: app distribution and payments. They handle your payment details; we only receive confirmation of what was bought.
We may disclose information when the law requires it, for example to comply with a valid order of a court or a government authority. Because backups are locked with your key, we can only ever hand over locked data.
Where it is kept
Our server and your locked backups are kept in Amazon Web Services' Mumbai region. Sign-in e-mails and support e-mail may pass through our providers' systems in other countries.
How long
- Account data and your cloud backup: until you delete your account or your backup. Deleting removes them from the server at once.
- Records of sign-in attempts: one day. Server logs with network addresses: up to 30 days.
- Copies in our server's disk snapshots (kept for recovery after a failure): up to 7 days after deletion.
- Records we must keep by law (for example of payments): as long as the law requires.
Security
Backups are locked on your phone with AES-256-GCM, using a key derived from your passphrase (Argon2id) and a recovery key that only you hold. The connection to our server is encrypted (HTTPS). The server keeps only fingerprints of sign-in codes and tokens. Anyone with your unlocked phone can open Filome, so keep your phone locked.
If you lose both your passphrase and your recovery key, nobody can open your backup, including us.
Your rights
Wherever you live, you may:
- ask what personal data we have about you and how we use it, and get a copy;
- ask us to correct or complete it;
- ask us to erase it, or erase it yourself by deleting your account;
- withdraw your consent at any time (this ends the account and cloud backup);
- name someone to act for you if you die or cannot act;
- complain to us, and to the data protection authority where you live.
These rights come from data protection laws such as India's Digital Personal Data Protection Act, 2023 and the GDPR in the European Union and the United Kingdom; we give them to everyone.
Write to privacy@filome.in from the e-mail address of your account. We answer within 30 days.
Children
Filome accounts are for adults (18 or over). A parent may keep a child's documents in a vault on their own phone; the child does not need an account, and we receive nothing about the child.
Phone permissions
| Camera | To scan documents. Only when you tap Scan. |
|---|---|
| Photos and files | To add a picture or file you choose. Filome sees only what you pick. |
| Internet | For sign-in and cloud backup. Filome works without it. |
Filome does not ask for your contacts, location, microphone or call logs.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app before they apply.
Contact and grievances
Privacy questions and requests: privacy@filome.in
Grievance Officer: [Name], grievance@filome.in, [postal address]. We acknowledge a grievance within 24 hours and resolve it within 15 days.