Privacy Policy — XFiles Pro (Android)
Last updated: 2026-08-30
XFiles Pro (app.local1st.files.pro) is a dual-pane file manager for Android with optional network locations.
The short version
- Local file management does not require an account and does not send your files to us.
- Network features (FTP/FTPS/SFTP/WebDAV/Nextcloud/SMB/S3/HTTP, Google Drive, Dropbox, OneDrive, Jellyfin, Emby, SSH terminal) only run when you add a connection or sign in.
- We do not run ads, analytics SDKs, or crash-reporting SDKs that phone home.
- Credentials and tokens for remotes stay on your device.
The Free Android product (app.local1st.files) is documented separately in the Free privacy policy and has no INTERNET permission.
Data we collect
We do not operate an XFiles backend that receives your file contents, browse history, or analytics from the app.
Data on your device
| What | Why | Leaves your device? |
|---|---|---|
| Local files and folders you open | Core file management | Only if you copy/upload them to a remote you configured |
| Installed-app list | App manager | No |
| App preferences | Settings (hidden files, dual-pane, etc.) | No |
| Remote connection settings and secrets | Network locations you add | Secrets stay local; traffic goes only to hosts/services you choose |
| Google Drive sign-in tokens | Sign in with Google when you use Drive | Tokens stored on device; used with Google’s APIs per Google’s policies |
Thumbnails generated for images and videos are cached in the app’s private storage. Clearing the app’s storage removes them.
Network
XFiles Pro declares INTERNET. Network access is used only for features you enable, for example:
- Connecting to servers you configure (FTP, SFTP, SMB, WebDAV, S3, media servers)
- Google Sign-In / Google Drive API when you choose Google Drive
- Dropbox / OneDrive APIs when you add those accounts
- Loading content from those destinations
There is no developer telemetry endpoint.
Permissions
Every sensitive permission is used for on-device file management (All files access, query/install/delete packages, a dataSync foreground service for long copies). None of them are used to send files to the developer.
Third parties
If you use Google Drive, Google processes authentication and Drive data under Google’s terms and privacy policy. Dropbox and OneDrive work the same way with those providers. Other remotes are servers you choose (your NAS, VPS, etc.).
Children
XFiles Pro is a general-purpose utility and is not directed at children.
Retention and deletion
XFiles does not maintain a developer-operated account or server-side user profile. Saved connection details remain on your device until you remove the network location or delete the app. Data held by a third-party service is controlled through that service.
Contact
Questions or privacy requests: nearby@local1st.app