FolderyMenu & FolderyMenu GO Privacy Policies

FolderyMenu Privacy Policy — macOS

FolderyMenu organizes and opens files, folders, applications, and web links from your Mac menu bar. This section applies to the Mac app; the separate FolderyMenu GO policy below covers direct cloud connections on iPhone and iPad.

File access and permissions

FolderyMenu accesses locations you authorize through Apple's native macOS file permissions and security-scoped bookmarks. These may include individual or parent folders, external drives, and locally available folders synced by iCloud Drive, Google Drive™, OneDrive™, or Dropbox. Access to a parent folder can include its contents. FolderyMenu does not bypass macOS security protections.

The app uses file and folder names, paths, types, and metadata such as modification dates to display and organize your menus. It also uses the applications and web links you add. Opening an item passes it to the application or browser you choose.

Local storage and your controls

Menu items, sorting and filtering preferences, pinned items, appearance settings, and file-access bookmarks are stored locally on your Mac. Backups that you create or restore are stored in the location you choose; a cloud-synced location is handled by its storage provider. If you enable FolderyMenu GO sync, the limited app data described in the next section is also stored in your private Apple CloudKit database.

We do not operate servers that receive or store your files, folder contents, metadata, or app configuration. You can remove saved items in FolderyMenu and manage applicable macOS permissions in System Settings. Remove local app data and any backups you created when you no longer want them. Removing a menu item does not delete the original file.

Cloud providers manage synchronization and authentication for their locally available folders. The direct OAuth connections described below apply to FolderyMenu GO.

Optional FolderyMenu GO sync through CloudKit

If you turn on Sync to FMGo, FolderyMenu uses Apple's CloudKit service to make supported FolderyMenu data available to FolderyMenu GO on devices using the same iCloud account. The synchronized data may include saved menu configurations, item names and stable item metadata, filter settings, pinned items, and supported result-list snapshots. It is linked to your iCloud account because CloudKit stores it in your private database.

This sync does not upload the contents of your local files, macOS security-scoped bookmark data for use on iPhone or iPad, Google OAuth tokens, account credentials, authorization headers, protected download links, or temporary local file locations. Synced Google Drive result snapshots may include item names, metadata, and HTTPS destinations needed to display and open those results in FolderyMenu GO.

The synchronized data is used only to provide app functionality. We do not use it for advertising, marketing, analytics, profiling, or tracking, and we do not sell it. Apple stores and processes the data through CloudKit under Apple's Privacy Policy.

You can stop future synchronization by turning off Sync to FMGo. You can also use FolderyMenu's reset or sync-removal controls to remove the Mac-owned synchronized data from CloudKit. Turning sync off by itself does not necessarily delete data that was already synchronized unless you choose the removal option. Local settings, manual backups, downloaded files, and original files remain until you remove them separately.

FolderyMenu GO Privacy Policy — iOS

FolderyMenu GO helps you browse, organize access to, open, and download files from Google Drive™, Microsoft OneDrive™, Dropbox, and iCloud Drive on your iPhone or iPad. Cloud connections are optional and require your authorization.

Google Drive™

Google sign-in and OAuth

When you connect Google Drive™, Google's sign-in and consent flow authenticates you and asks you to approve access. FolderyMenu GO uses OAuth access tokens to make authorized requests to the Google Drive™ API. A refresh token, if issued, allows the app to renew that access without asking you to sign in each time. The app does not receive or store your Google password.

Basic account information returned during sign-in, such as your account identifier, email address, or display name, is used only to identify the connected account and manage its authorized connection. An account email address does not grant access to your inbox: FolderyMenu GO does not request Gmail, email-message, contacts, or calendar access.

The Drive API provides the file and folder information needed to browse the locations you access and retrieves file contents when you choose to open or download a file. This data is used only for these visible features.

Google's Limited Use requirements

FolderyMenu GO complies with the Google API Services User Data Policy and the Google Workspace API user data policy, including their Limited Use restrictions, for information obtained through Google APIs and any transfer of that information to another app.

Remove Google access and reconnect

To remove FolderyMenu GO from your Google Account entirely, visit Google's linked apps page, select FolderyMenu GO, and remove all connections and permissions for the app. This revokes the app's permissions, including access to Google Drive™. To regain Google Drive™ access, you must reconnect your Google Account from within FolderyMenu GO and complete Google's sign-in and permission approval process again.

OneDrive™: Microsoft sign-in and OAuth

When you connect OneDrive™, the Microsoft identity platform handles sign-in and consent. FolderyMenu GO uses OAuth tokens and Microsoft Graph delegated permissions to act on behalf of the signed-in user, within the access approved by you or your organization. Refresh tokens, if issued, maintain that authorized connection. The app does not receive or store your Microsoft password.

Account identifiers, email addresses, or display names returned by Microsoft are used only to identify your connected account and manage access. Microsoft Graph is used to browse authorized OneDrive™ files and folders and retrieve files you choose to open or download. FolderyMenu GO does not request Outlook email-message, contacts, calendar, or organization-wide application access.

OneDrive™ data is handled within your consent and the Microsoft APIs Terms of Use and Microsoft identity platform requirements.

To disconnect OneDrive™, manage or revoke FolderyMenu GO's permissions in your Microsoft account's app-access settings. For work or school accounts, use your organization's app-permission controls or contact its administrator.

Dropbox: sign-in and read-only access

When you connect Dropbox, Dropbox handles sign-in and asks you to authorize access through its OAuth consent flow. FolderyMenu GO uses OAuth access tokens to make authorized Dropbox API requests. A refresh token, if issued, allows the app to renew that access. The app does not receive or store your Dropbox password.

FolderyMenu GO requests read permission only; write access is not enabled. The app reads file and folder information to browse your authorized Dropbox locations and retrieves file contents when you choose to open or download a file. It cannot upload, create, edit, move, rename, or delete files or folders in Dropbox. Any account information returned by Dropbox, such as an account identifier, email address, or display name, is used only to identify your connected account and manage the connection.

The Dropbox consent screen describes the extent of the access you authorize. Read-only access may cover more than the folder you select in FolderyMenu GO; selecting a folder in the app does not narrow the underlying Dropbox permission. We use Dropbox data only as you authorize and as necessary for the connection and file-access features described in this policy.

We, the developer of FolderyMenu GO, are responsible for the privacy, security, and integrity of Dropbox data accessed or handled by our app. The storage, transmission, sharing, retention, and deletion provisions below apply to Dropbox data and authorization tokens. Dropbox operates its own service under the Dropbox Privacy Policy.

To revoke access, open Dropbox on the web, go to Settings > Apps, select FolderyMenu GO, and choose Disconnect. See Dropbox's instructions for managing connected apps. Reconnecting requires you to authorize the app again. Disconnecting does not delete your Dropbox originals or previously downloaded copies; remove local copies as described below.

iCloud Drive: Apple's native APIs

FolderyMenu GO accesses iCloud Drive through Apple's native iOS file-access APIs and system file-selection permissions. Apple manages your Apple Account sign-in and iCloud connection on your device. This is not a separate Google-style or Microsoft-style OAuth login, and FolderyMenu GO does not receive your Apple Account password.

The app accesses the files and folders you authorize through Apple's system interfaces. iOS manages the permitted access and any downloading needed to make an iCloud file available locally. Apple handles iCloud storage and synchronization under your device settings.

To remove iCloud Drive access, remove saved file or folder references in the app and manage iCloud Drive availability through your device's Apple Account settings.

FolderyMenu sync through CloudKit

If FolderyMenu GO sync is enabled in FolderyMenu for Mac, FolderyMenu GO retrieves supported menu configuration, item metadata, filter settings, pinned items, and result-list snapshots from your private Apple CloudKit database. This data is used only to display and operate your synchronized FolderyMenu items. FolderyMenu GO does not receive the contents of your Mac files, Mac security-scoped bookmarks, Google credentials, OAuth tokens, authorization headers, or protected download links through this sync.

You can stop publishing future updates from FolderyMenu for Mac and use its reset or sync-removal controls to remove Mac-owned synchronized data from CloudKit. You can remove local imported items and app data using FolderyMenu GO's controls or by deleting the app. Apple handles CloudKit storage under your iCloud account and its privacy policy.

Minimum permissions and limited purposes for all cloud connections

FolderyMenu GO requests only the minimum permissions needed to sign you in, maintain your authorized connection, and provide the browsing, opening, and downloading features you choose to use. Signing in identifies your account; reading files requires separate file-access authorization. We do not request permissions for unrelated or future features.

The provider's consent screen describes the access being requested. File permissions may cover more than a single folder, depending on the provider's available permission model; choosing a folder in the app does not itself narrow an OAuth grant. The app uses authorized access only for the features described here. You may decline access, in which case features requiring that access will be unavailable.

FolderyMenu GO does not request cloud-file write, edit, or delete permissions for these features. It can open or download files, but editing must be performed in an external app and the edited version must be saved separately. FolderyMenu GO does not upload edits, overwrite cloud originals, or automatically save changes back to your drive.

Data accessed, stored, and transmitted

• Account information and authorization tokens: used on your device only to sign in, identify the connected account, and authorize API requests. These are not sent to or stored on our servers.
• File and folder information: names, identifiers, paths, types, sizes, dates, and thumbnails, where supplied, are used to display and navigate your authorized files. Saved references and any local caches support that functionality on your device.
• File contents: opening or downloading a file transfers its contents from the provider to your device or opens it with your chosen application. Temporary copies and files you explicitly save may remain locally.
• App settings: curated items, preferences, and file-access references are stored locally. Device backups or destinations you choose may be handled by Apple or another provider according to your settings.

Cloud sign-in and API requests communicate with Google, Microsoft, Dropbox, or Apple as needed to authenticate and retrieve the data you request. Those providers receive the requests and associated connection information necessary to operate their services. We do not route your cloud files through our servers or maintain a server-side copy of your account information, tokens, file contents, metadata, or app settings.

Provider connections use encrypted transport (HTTPS/TLS); local app data is subject to Apple's device and app security protections. Protect access to your device and to any files you export. When you send a file to an external app, that app receives the selected file and handles it under its own privacy policy.

Sharing and data-use limits for all cloud connections

Cloud data is used only to provide the account connection and file-access features described above. We do not sell or rent it, use it for advertising or marketing, share it with data brokers or information resellers, use it for creditworthiness, lending, credit decisions, or surveillance, or use it to create unrelated databases. These limits also apply to data derived from cloud data.

Google user data obtained through Google Workspace APIs is not used to develop, improve, or train generalized or non-personalized artificial intelligence (AI) or machine-learning (ML) models. We do not otherwise use connected cloud data to train AI or machine-learning models.

Our staff do not have access to your connected cloud files through our servers. Files are passed to another app only when you choose to open or share them there. We do not provide cloud data to third parties for unrelated purposes.

Retention, revocation, and deletion for all cloud connections

Account connection information is used only while needed to maintain the connection you authorize. Saved items and settings remain on your device until you remove them or delete the app's local data. Downloaded or exported copies remain where you save them until you delete them. We retain no server-side cloud-account or file data to delete.

Local data: remove saved items and downloaded copies you no longer need. To remove the app's local container, delete the app rather than offloading it. Separately delete files exported to Files or another app and any backups you control. Revoking access does not erase previously downloaded copies.

Once the provider makes a revocation effective, the app cannot use that authorization for further cloud access; provider token expiration and revocation rules determine when this takes effect. Revocation does not delete your original cloud files. You can view, correct, or delete those originals and your account details directly with the provider. Changes to cloud originals do not automatically change copies you already downloaded.

Privacy information for both apps

Other services and tracking

The apps do not use third-party advertising trackers. Opening web links, using Apple's App Store purchase or subscription services, and accessing provider-managed cloud storage involve the respective services. This policy describes the apps; those services apply their own privacy policies, including Google's Privacy Policy, Microsoft's Privacy Statement, and Apple's Privacy Policy.

Children's privacy

FolderyMenu and FolderyMenu GO are not directed toward children.

Changes to these policies

We update the date above when these policies change. If we introduce a new use of connected account or cloud data, we will explain it and obtain any required consent before that new use begins.

Privacy questions and requests

For privacy questions or help managing access and deleting local or synchronized app data, visit FolderyMenu's website and Help. We cannot access or delete original files held only on your device or by your cloud provider; use the controls described above to manage those files. FolderyMenu's sync-removal controls can delete the Mac-owned FolderyMenu data that the app placed in your private CloudKit database.