Data safety & account deletion

Last updated: September 21, 2026

This page is the complete data safety declaration for the amardrive Android app (Google Play package amardrive.com), published by Kernelv5, Inc., a Delaware C Corporation (Delaware file no. 2668870). It lists every category of user data the app transmits off your device, why it is transmitted, who processes it, how long it is kept, and exactly how to delete your files or your entire account.

It complements — and does not replace — our Privacy Statement, EU/UK GDPR Notice and Terms of Use. Where this page describes a practice in more detail, it is the more specific description of that same practice.

1. Summary

amardrive is a personal cloud storage service. Its core function is to take files you choose — documents, photos, videos, audio — and store them on servers so you can reach them from any of your devices. That means the app does transmit user data off your device: it could not work otherwise. Everything it transmits is listed below.

Plain-language commitments

• We never sell or rent personal data to anyone, for any price.
• We serve no advertising and ship no advertising or attribution SDKs. The app never requests an advertising ID.
• We do not use your files, file names or activity to build advertising profiles, and we do not use them to train machine-learning models.
• Data is collected only where it is needed to run the account you asked us to run, to bill you correctly, to keep the service secure, or where the law requires it.
• Deletion is real deletion: when the retention window described below elapses, the stored object is removed from storage, not merely hidden from you.

2. Data the app collects

The table below uses the Google Play data-type names, so it can be read side by side with the Data safety section of our Play store listing. Collected means the data is transmitted off your device. Shared means it is transferred to a third party for that party's own purposes — which, for every row, is no. Companies that process data strictly on our instructions in order to deliver the service are service providers, and are listed separately in section 6.

Data marked Required cannot be switched off without giving up the account or the feature it powers — a storage service cannot store a file it was never given. Data marked Optional is collected only if you use that feature.

3. Data the app does not collect

For completeness, these Google Play data types are not collected, not shared, and not processed ephemerally by the amardrive Android app:

• Location — neither approximate nor precise. The app requests no location permission and does not geolocate IP addresses.
• Contacts, Calendar, SMS and call logs — never requested, never read.
• Messages — emails, SMS and in-app messages are not collected.
• Health and fitness data.
• Voice or sound recordings — the app never opens the microphone.
• Web browsing history and in-app search history — searches run against your own file list and are not stored.
• Installed applications — the app does not inventory other apps.
• Crash logs, diagnostics and other app performance data — the app ships no crash-reporting or product-analytics SDK: no Crashlytics, no Firebase Analytics, no third-party analytics or attribution library of any kind.
• Advertising ID — not requested, not used. The app contains no advertising libraries.
• Race and ethnicity, political or religious beliefs, sexual orientation, government ID, postal address, phone number — not requested anywhere in the app.

Separately, consent-based Google Analytics runs on our website (amardrive.com) only, and only after you opt in on the cookie banner. It is not present in the Android app. See the Cookie Policy.

4. Android permissions, and what each one is for

The app reads your media through the system picker or the permission you granted. It does not scan, index or upload anything you did not select or configure.

5. Why we collect each item

Using the Google Play purpose names, we process data for:

• App functionality — storing, listing, previewing, searching, sharing, downloading and syncing your files across devices.
• Account management — creating and maintaining your account, your plan and your linked devices.
• Fraud prevention, security and compliance — abuse and rate limiting, detecting suspicious sign-ins, enforcing device limits and storage quotas, meeting tax and legal obligations.
• Developer communications — transactional email only: payment receipts and failures, renewal reminders, quota warnings, lock notices and deletion notices.

We do not process data for advertising or marketing, personalisation, or in-app analytics.

Legal bases (EEA and UK)

• Contract — running your account, storing your files, billing you.
• Legitimate interests — keeping the service secure and preventing abuse.
• Legal obligation — tax, accounting and lawful requests.
• Consent — website analytics cookies only, withdrawable at any time.

6. Sharing and service providers

We may also disclose data where we are legally compelled to — a valid court order, warrant or equivalent legal process — or where it is necessary to protect our rights, our users, or the public. Data may be processed in the United States and other countries; such transfers are covered by appropriate safeguards including the EU Standard Contractual Clauses and the UK Addendum where applicable.

7. Security practices

• Encrypted in transit. Every byte between the app and our API travels over TLS 1.3. There is no unencrypted path anywhere between your device and storage.
• Encrypted at rest. Files are stored with AES-256 encryption on Cloudflare R2, with object versioning and WORM-capable Object Lock.
• Authenticated on every request. Each API call carries a short-lived Firebase ID token. Requests without a valid token are rejected, and a token only ever grants access to its own account's data.
• Device confirmation on destructive actions. Deleting an account requires a typed confirmation plus your device biometric or screen lock.
• Device list and remote sign-out. You can see every device linked to your account and revoke any of them.
• Least-privilege administration with an audit log. Administrative access is restricted, and every administrative action is written to an audit log.
• Users can request that their data be deleted — in the app, or by email. See section 9.

One thing we state plainly

amardrive is not an end-to-end (“zero-knowledge”) encrypted service. To provide thumbnails, previews and web access, our systems are technically able to process file contents. We access file contents only to operate, secure and support the service, or where the law requires it — never to sell, mine or exploit them. We would rather say this clearly than imply a guarantee we do not provide.

8. Deleting individual files

Deleting a file in amardrive happens in two stages, so an accidental delete stays recoverable for a while and a deliberate delete is final.

1. Move to Trash. Deleting a file moves it to Trash. It stops counting against your storage as active content, disappears from your file lists, and its entry is removed from your activity feed.
2. Automatic permanent purge. Each trashed file is stamped with a purge deadline the moment you delete it — 30 days by default; some plans set a different Trash retention period, which is shown with that plan. A job that runs every day at 03:00 UTC permanently removes every trashed file whose deadline has passed: the stored object is deleted from storage and its database row is deleted with it. Nothing about the file is retained afterwards.

You do not have to wait for that window. In the Trash screen you can Delete permanently on any single file, or Empty Trash to purge everything at once — both remove the stored object immediately. You can also Restore a file to put it back, as long as it still fits within your storage quota.

9. Deleting your amardrive account and all its data

You can delete your amardrive account — the account you created by signing in to the amardrive app published by Kernelv5, Inc. — at any time, without contacting support, from inside the app. If you no longer have the app installed, email us and we will do it for you. Both routes are free, and neither requires you to give a reason.

Option A — delete it yourself, in the app

Option B — ask us to delete it

If you have uninstalled the app, lost access to your device, or would simply rather we did it, email us from the address your account uses:

connect@amardrive.com

Put Delete my account in the subject line. We verify that the request comes from the account holder, then put the account into the same deletion process described below. We acknowledge requests as quickly as we can and complete them well within 30 days of verification, as required under GDPR and comparable laws.

What happens immediately

• Your account is locked the moment the request is accepted — no further uploads or downloads.
• Any active subscription is cancelled and any saved payment method is removed at our payment processor straight away, so you are not billed during the waiting period.
• A permanent erasure is scheduled for 15 days later, and the exact date is shown to you in the app.

Why there is a 15-day wait

The delay exists to protect you, not us. It is a safety net against an accidental deletion, a mistaken tap by someone else holding your unlocked phone, or a simple change of mind — your data is recoverable during those 15 days and gone forever afterwards. Nothing new is collected during the wait, the account stays locked throughout, and you are not charged.

What is permanently deleted on the scheduled date

• Every file you uploaded — the stored objects are deleted from Cloudflare R2, including anything still sitting in Trash.
• All file and folder metadata — names, sizes, types, folder structure, timestamps and starred items.
• All share links you created, which stop working at that moment.
• Your activity history — the entire record of what you uploaded, renamed, moved or deleted.
• Your linked devices and their identifiers.
• Your subscription records in our database, and your customer record and saved cards at our payment processor.
• Your profile details stop being used for anything — the account is marked deleted, disconnected from its billing identity, and every piece of content associated with it is gone.

What we keep, and for how long

Two narrow categories survive an account deletion, both for reasons the law either requires or expects:

• Financial records. Invoices, receipts and payment records are retained by us and by our payment processor for as long as tax, accounting and anti-fraud law requires. These cannot be deleted on request, because keeping them is a legal obligation rather than a choice — the standard exception recognised under GDPR Article 17(3)(b).
• A minimal closed-account record. We keep a small internal record noting that an account with that identifier and email address existed and was deleted, plus the entries in our administrative audit log. It holds no files, no file names and no activity history. It exists so a deletion can be proven to have happened, so a later sign-in with the same identity is treated as a new and empty account rather than resurrecting old data, and so abuse of the deletion process can be detected. If you want this record removed too, say so when you email us and we will handle it as an erasure request.

Short-lived infrastructure and security logs at our hosting provider, which may contain the IP addresses of past requests, expire on that provider's own schedule and are not tied back to your deleted account.

Data still on your own device

Files you downloaded, offline copies and cached thumbnails live on your phone, not on our servers. Clearing the app's cache from the Account screen removes cached data, signing out removes stored credentials, and uninstalling the app removes everything the app kept locally. Deleting your account on our side does not reach into your device's own Downloads folder — anything you saved there is yours to keep or delete.

If anything goes wrong

If a deletion does not complete, if you cannot reach the Delete account button, if you are locked out of the account you want deleted, or if you simply want written confirmation that your data is gone — email connect@amardrive.com and a person will answer. We will confirm in writing once the erasure has run. There is no charge for any of this, at any stage.

10. Retention at a glance

An account being locked — because a payment failed, a trial ended, or storage went over quota — is not a deletion. A locked account keeps its files while access is suspended, and you restore access by settling the account. Deletion only ever happens when you request it, or after a lock has gone unresolved and we have given notice by email.

11. Your rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you, and get a copy of it.
• Correct anything inaccurate.
• Delete your data — the right exercised by section 9.
• Export your files and account data in a portable form. Your files can be downloaded from the app at any time; email us if you would prefer a bulk export.
• Restrict or object to certain processing.
• Withdraw consent at any time for anything based on consent.

Email connect@amardrive.com to exercise any of these. We respond within one month. We never charge for a request and never ask you to justify one. If you are in the EEA or the UK you can also complain to your national data protection authority, or to the ICO in the United Kingdom.

amardrive is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

12. Contact

A real person reads this address, and replies to it:

connect@amardrive.com

Kernelv5, Inc. — Delaware C Corporation, file no. 2668870 — is the data controller for amardrive and the developer of the amardrive Android app. Postal address: [Delaware registered-agent street address].

Related reading: Privacy Statement · EU/UK GDPR Notice · Terms of Use · Cookie Policy · Security