Privacy Policy

This policy describes the owner-operated, single-user application AFPC rclone Backup. The application uses Google Drive only for backup, recovery, and integrity verification by the account owner.

Data accessed

When the owner grants OAuth permission, the app can access Google Drive file metadata and content under the granted full Google Drive scope. Actual operational reads and writes are restricted by the owner's configured rclone commands to designated backup archives and recovery files. The OAuth client can technically access, modify and delete other Drive files; do not authorize it unless you trust your own local computer and configuration.

How data is used

The tool uploads Restic-encrypted archive parts and checksum manifests, lists and verifies cloud files, and downloads files for isolated recovery tests. The backup encryption key remains under the owner's control. Google access and refresh tokens are kept in user-private local configuration and used only to authenticate rclone calls. The application does not use Google user data for advertising, analytics, model training, or sale.

Storage, sharing, and retention

Backup files are stored in the owner's Google Drive account. Google's own service processes transferred data under its terms. The application does not send Google Drive data to any separate app server or third-party analytics provider. Uploaded archives and local tokens remain until the owner deletes or revokes them; the app has no externally managed retention policy.

Security and controls

Backup contents are encrypted locally by Restic before upload; OAuth credentials are restricted to the local operating-system account. The owner can revoke Google access at Google Account permissions, delete stored archives, or remove the local rclone configuration. Revocation prevents further authorized access but does not automatically delete files already stored in Drive.

Contact and changes

For questions, use the Google-account support email displayed on the app's OAuth consent screen. Changes to this policy will be reflected here with a new date. This app follows the Google API Services User Data Policy, including Limited Use requirements.