This policy describes how the Cubby app for Android (io.cloudron.cubby) handles information. Cloudron UG publishes the app. Cubby is part of S42. S42 is a separate product from Cloudron, and this policy covers the Cubby Android app only.
Cubby is a file client. It connects to a Cubby server that you, or your organization, run. Cloudron UG does not operate that server and does not receive your files.
Who we are
Cloudron UG, Ziegelstr. 6, 84061 Ergoldsbach, Germany.
Privacy questions: info@cloudron.io
What the app stores on your device
The app keeps a sign-in for each Cubby server you add:
- the server address
- an API token issued by that server
- your username, display name, and email address on that server
- whether that account is an administrator
It also keeps a local cache so you can browse while offline: directory listings, and the bytes of files you pin. Files you open or send to another app are downloaded into the app’s cache. Those copies are removed when they are older than 24 hours, or sooner if the cache grows past 100 MB.
The sign-in and the directory cache are stored in the app’s local database. Android backup and device-to-device transfer exclude that database and the temporary state used during sign-in. Pinned file bytes are kept in the app’s private storage. Files downloaded so another app can open them stay in the app cache.
Removing a server in the app deletes that server’s saved sign-in and its cached files from the device. Uninstalling the app removes what is left.
What the app sends, and where
The app talks only to the Cubby server address you enter. File names, file contents, shares, and search queries go to that server, over HTTPS when the server address uses https://.
Sign-in uses OpenID Connect. The app opens your server’s login page in a browser tab. The identity provider is the one configured on that server. The app sends the authorization code back to your Cubby server and stores the token the server returns. The app does not create accounts.
When you share a file with someone, the app loads names and email addresses from your server so you can pick a person. Those addresses stay on your server.
The app checks whether the device has a network connection so it can fall back to the cache. That check stays on the device. The app does not collect location, contacts, or an advertising identifier.
If you open a file in another app, or share a file into Cubby, that transfer is the one you started. The other app receives only the file you chose.
Cloudron UG does not sell this information, and the app does not include advertising or analytics libraries.
Who else handles it
Whoever runs your Cubby server decides how long files and accounts are kept there, and who on that server can see them. That operator’s own policy applies to data stored on the server.
Your server’s identity provider handles the login page. Cloudron UG does not see that password.
Accounts
The app does not create a Cubby account. To delete an account, use the tools on your Cubby server or ask the person who administers it. Removing the server inside the app, or uninstalling the app, deletes the copy stored on the phone.
Changes
If this policy changes, the updated text will be posted on this page with a new date.