Privacy Policy

Last updated: October 2026

BackupFlow is built from the ground up with local-first privacy. Your photos, videos, files, and server credentials never touch our servers or any third-party cloud.

1. Introduction

Welcome to BackupFlow. We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how BackupFlow handles information when you use our iOS application and website.

Core Principle: BackupFlow operates on a strict local-first, zero-knowledge architecture. Your photos, videos, documents, and server credentials are never uploaded to our servers or any third-party cloud service. All transfers occur directly between your iPhone and the server you configure (NAS, home server, or personal cloud).

2. Information We Do NOT Collect

BackupFlow does not collect, transmit, store, or sell any of the following:

  • Your photos, videos, or media metadata
  • Files or folders selected from the iOS Files app
  • Your server addresses, hostnames, ports, usernames, or passwords
  • Your backup tasks, schedules, or backup history logs
  • Device identifiers, advertising IDs (IDFA), or usage analytics
  • Your IP address, precise location, or contacts

3. How Your Data Stays Private

3.1 Local Device Storage & iOS Keychain

All backup task configurations, schedules, history logs, and app preferences are stored locally on your iPhone. Sensitive credentials (such as FTP, SFTP, and WebDAV passwords) are encrypted inside the iOS Keychain and never leave your device except when authenticating directly with your own server.

3.2 Direct Device-to-Server Transfer

When a backup runs, your files are transferred directly from your iPhone to your designated server using standard protocols (FTP, SFTP/SSH, or WebDAV over HTTP/HTTPS). BackupFlow does not route traffic through any intermediate or proxy servers.

3.3 Zero Third-Party Analytics or Tracking

BackupFlow contains no third-party analytics SDKs, telemetry trackers, crash-reporting SDKs, or advertising frameworks.

4. App Store & System Information

The only external information associated with the app is standard data processed by Apple through the App Store:

  • App download, free-to-try usage, and optional In-App Purchase (BackupFlow Pro Lifetime) verification (processed entirely by Apple StoreKit)
  • Aggregated, anonymized crash logs or diagnostics (only if you have opted in to share diagnostics with app developers in iOS Settings)
  • Public ratings and reviews you choose to post on the App Store

This information is governed by Apple's Privacy Policy and cannot be used by us to identify you personally.

5. Permissions & Device Access

  • Photo Library Access: Used solely to read new or modified photos and videos (and optionally download originals from iCloud Photos when Download iCloud items if needed is enabled) so they can be backed up to your server.
  • Files & Folders Access: When you choose Select Folder, BackupFlow uses iOS security-scoped bookmarks solely to read the folder you selected in the Files app.
  • Local Network & Internet Access: Used exclusively to connect to your configured FTP, SFTP, or WebDAV server on your home Wi-Fi or over the internet.
  • Background App Refresh: Used with iOS BGTaskScheduler to execute your scheduled backups in the background when conditions (Wi-Fi, power, battery, time window) are met.
  • Notifications: Used only to inform you of backup completion, errors, or pending scheduled tasks.

6. Data Security & Integrity

  • Encrypted Protocols: Supports encrypted transfers via SFTP (SSH) and WebDAV over HTTPS.
  • SFTP Host Key Verification: Remembers your SFTP server's SSH fingerprint on first connection and alerts you if the server identity ever changes.
  • Checksum Verification: Optional Checksum mode verifies that uploaded files arrive on your server intact.
  • Keychain Protection: Credentials are protected by hardware-backed iOS Keychain encryption.

7. Third-Party Services

BackupFlow does not integrate with any third-party cloud, analytics, or advertising services. The app communicates solely with the backup server addresses that you explicitly configure.

8. Children's Privacy

BackupFlow does not knowingly or unknowingly collect personal data from anyone, including children under the age of 13 (or the applicable age in your jurisdiction).

9. Your Rights, Control & Data Reset

Because we do not collect or store any of your personal data on external servers, you hold complete control directly on your iPhone:

  • You can view, edit, or delete individual backup tasks and saved servers at any time from the Backup Hub.
  • You can clear your backup logs at any time in Backup History or adjust automatic expiration in Settings › History Retention (Days).
  • You can permanently wipe all tasks, history, and saved Keychain passwords from your device at any time by tapping Settings › Reset All Data, or by uninstalling BackupFlow. Files already backed up on your servers are never affected.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect new app features or legal requirements. Updates will be posted on this page with a revised "Last updated" date.

11. Contact Information

If you have any questions about this Privacy Policy or BackupFlow's privacy practices, you can reach us via Settings › Contact Support in the app or directly at:

12. Jurisdiction & Compliance

BackupFlow is designed to comply with global privacy regulations, including the European Union General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law (KVKK), the California Consumer Privacy Act (CCPA), and Apple App Store privacy guidelines. Because no personal data is collected or processed by us, your privacy is protected by design.

Privacy Summary

BackupFlow is designed with your privacy as the top priority. We do not collect, store, or have access to your personal data, photos, videos, files, or server credentials. Every backup goes directly from your iPhone to your own server, giving you 100% ownership and control.