Privacy Policy

1. Who we are

UziBackup ("the app") is an independent Mac application published by the UziBackup team ("we", "us", "our"). Where data protection law designates a controller, the publisher of UziBackup is the controller for the information described in this policy.

You can reach us at [email protected]. We will provide our full business details, including our registered name and address, on request to any user, and to any regulator or authority entitled to them.

2. Scope

This policy covers the app and uzibackup.com. It does not cover Google's services, your storage provider, your network, or any other third-party product you use alongside the app, each of which is governed by its own terms and privacy policy.

By using the app you agree to the handling of information as described here and to our Terms of Service.

3. Information we handle

Google account information

When you connect a Google account, the app requests your authorisation for the following access. Google presents this list to you before you approve it.

openid, userinfo.email, userinfo.profile

Basic account information — an account identifier, email address and display name — used to identify the connected account within the app and to address notifications.

drive.readonly

Read-only access to Drive content available to you, used to list your files and copy them to the destination you select, converting Google Docs, Sheets and Slides to Office formats in the process. The access is read-only, so the app cannot modify or delete anything in your Drive.

gmail.send optional

Permission to send mail, requested only if you enable email notifications through Gmail, and used solely to send you summaries of backup activity. It does not permit reading or modifying your mail.

Backup content is transferred from Google to the destination you select. We do not operate a service that receives, stores or inspects the content of your files.

Information stored on your device

The app stores authorisation credentials, your settings, and a record of backup activity locally on your Mac so that it can operate between sessions. This information remains under your control and is removed when you disconnect an account or remove the app's data.

Usage and diagnostic information

We collect limited information about how the app and website are used — for example, how many devices are active over a period, the version of the app and operating system in use, general technical and regional characteristics derived from network requests, and diagnostic information about errors and performance. This helps us understand demand, prioritise our work, and keep the app functioning and secure. We may use service providers and standard analytics technologies for this purpose.

This information does not include the content of your files. Where it constitutes personal information under applicable law, it is handled in accordance with this policy.

4. Google Limited Use disclosure

UziBackup's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, and notwithstanding anything else in this policy, information obtained through Google APIs is used only to provide and improve the user-facing features of the app; is not transferred except as necessary to provide those features, to comply with applicable law, or as otherwise permitted by that policy; and is not read by humans except with your affirmative consent, for security purposes, or where required by law.

We do not use, transfer or sell information obtained through Google APIs for:

• targeted advertising, or personalised, retargeted or interest-based advertisements;
• sale to data brokers, or provision to information resellers;
• determining credit-worthiness, or for lending purposes;
• creating databases; or
• training generalised or non-personalised artificial intelligence or machine learning models.

These restrictions apply to information obtained through Google APIs wherever it is processed, including on your own device, and whether or not it is retained afterwards.

5. How we use information

Subject to section 4, we use the information described above to:

• provide, operate and maintain the app and website;
• authenticate you with the services you connect;
• communicate with you, including about updates, security matters and support requests;
• understand how our products are used, and measure and analyse activity and demand;
• develop, test and improve existing products and create new products, features and offerings;
• maintain the security and integrity of our products and investigate misuse; and
• comply with legal obligations and establish, exercise or defend legal claims.

Where the law requires a legal basis, we rely on the performance of our agreement with you, your consent where we ask for it, our legitimate interests in operating and improving our products, and compliance with legal obligations, as applicable to the processing concerned.

6. How information is shared

We may share information:

• with service providers who process it on our behalf and under our instructions, such as hosting, content delivery and analytics providers;
• where you direct us to, or where you have consented;
• to comply with applicable law, regulation, legal process or an enforceable governmental request, and to protect our rights, safety and property or those of others; and
• in connection with a merger, acquisition, financing, reorganisation or sale of assets, in which case this policy will continue to apply to the information transferred until it is superseded.

Any sharing of information obtained through Google APIs remains subject to section 4.

7. Retention

Information held on your device remains until you remove it. Information we hold is retained for as long as needed for the purposes described in this policy, and afterwards for as long as is reasonably necessary to comply with our legal obligations, resolve disputes and enforce our agreements. When the retention period for a given type of information expires, we delete or destroy it. Aggregated or de-identified information, which does not identify you, may be retained and used indefinitely.

Information obtained through Google APIs is not retained on our systems. It is transferred between Google and your device, and any copy of it resides on your device or on storage you control. You can remove it at any time by disconnecting the account, deleting the backup, or removing the app's data from your Mac, and you can withdraw our access entirely at myaccount.google.com/permissions.

You may also request that we delete data we hold about you by emailing [email protected]. We will action the request within 30 days, or sooner where the law sets a shorter deadline, except where we are required or permitted by law to retain it.

8. Security

Information obtained through Google APIs is protected in transit by TLS encryption on every connection between the app, Google and your chosen destination. Sign-in uses the OAuth 2.0 authorization code flow with PKCE, so the app never receives or stores your Google password, and the access it is granted is read-only, so it cannot alter or delete anything in your Drive. Authorisation credentials are held locally on your Mac under the protection of your macOS user account, and are removed when you disconnect the account. We operate no server that receives or stores the content of your files, which removes the largest category of risk entirely. We take reasonable measures designed to protect information appropriate to its sensitivity.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Securing your own device, user account and backup destination — including encrypting that destination if its contents are sensitive — remains your responsibility.

9. Your choices and rights

You can, at any time:

• withdraw the app's access to your Google account at myaccount.google.com/permissions;
• disconnect an account within the app, or remove the app and its stored data from your Mac;
• turn optional features, such as email notifications, off; and
• delete backups from your destination storage, which are ordinary files under your control.

Depending on where you live, you may have rights to access, correct, delete or port personal information, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your supervisory authority. To exercise a right, contact us at [email protected]. We may need information from you to verify your identity before acting, and may decline a request where an exception applies or where we cannot identify you from the information we hold. We do not discriminate against anyone for exercising a privacy right.

10. International transfers

We and our service providers may process information in countries other than your own, whose data protection laws may differ. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers. Transfers of your Drive content between Google and your device are determined by Google and your own location, and are governed by Google's privacy policy.

11. Children

The app is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take appropriate steps.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our products, our practices, or applicable law, including the introduction of new features or new uses of information. The effective date above indicates when it was last revised. Where a change is material we will provide notice through the app or the website before it takes effect, and where the law requires your consent we will obtain it. Your continued use of the app after a change takes effect constitutes acceptance of the updated policy.

13. Contact

Questions, requests or complaints: [email protected]. We aim to respond within 30 days, or sooner where the law sets a shorter deadline. If you need to correspond by post, ask and we will provide an address.

See also our Terms of Service.