Privacy Policy

Global availability & applicable law

Fileforth is offered globally through the Mac App Store, in every country where Apple makes the App Store available. Because we do not collect personal data, this policy applies uniformly to all users regardless of jurisdiction. The substantive protections below mirror the strictest applicable regime so that users in any country receive the same level of privacy.

We have written this policy to comply with, among others:

• EEA & Norway: the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Norwegian Personal Data Act (personopplysningsloven)
• United Kingdom: the UK GDPR and the Data Protection Act 2018
• Switzerland: the revised Federal Act on Data Protection (FADP / nFADP)
• United States — California: the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA)
• Brazil: the Lei Geral de Proteção de Dados (LGPD)
• Canada: the Personal Information Protection and Electronic Documents Act (PIPEDA)
• Australia: the Privacy Act 1988 and the Australian Privacy Principles

Because Fileforth does not transmit any personal data to Advisiant, no processing of user data under any of these regimes takes place on our side. The only place where these laws become relevant in practice is when you contact us by email — see “Your rights” below.

Data Controller

The data controller is:

Advisiant AS
Org nr 936 993 478
Sandnes, Norway
[email protected]

What Fileforth stores on your device

• Connection profiles (host, port, username, remote path, provider type) are stored in a JSON file inside the app sandbox.
• Passwords and access keys are stored in the macOS Keychain. The app never writes them to disk in plain text.
• Known SSH host keys are stored in an OpenSSH-compatible known_hosts file inside the app sandbox.
• Transfer history (file names, sizes, timestamps, success/failure) is stored locally so you can review what you transferred.

Uninstalling the app removes everything in the sandbox. Keychain entries created by the app can be removed via the Keychain Access utility.

What Fileforth does not collect

• No analytics or telemetry
• No crash reporting back to us
• No advertising identifiers
• No user accounts or sign-in
• No contact list, photos, or other personal device data

Network connections

Fileforth connects only to the servers you configure as connection profiles. These connections are made directly from your Mac to those servers, using the protocol you select (SFTP, FTP/FTPS, WebDAV, S3, or Azure Blob). The connection details, transferred bytes, and any credentials are visible only to you and to the remote server you connect to. No traffic is routed through Advisiant.

Mac App Store (Apple)

Fileforth is distributed exclusively through the Mac App Store. To download or purchase the app, Apple requires you to use an Apple Account, and Apple independently processes data as part of running the App Store. This processing is done by Apple as a separate data controller — Advisiant has no access to your Apple Account or payment details, and we do not receive a list of who installed the app.

Data Apple collects in connection with App Store distribution typically includes:

• Apple Account identifier and payment details (handled entirely by Apple)
• Device model, operating system version, and country/region
• App Store engagement events (impressions, downloads, updates)
• Diagnostics and usage data if you have opted in to share these with app developers in iOS/macOS settings

What Apple may share back with us is limited to aggregate, anonymized App Store metrics in App Store Connect (e.g. download counts per region, crash reports if you opted in to share diagnostics). We cannot identify individual users from this data.

For details about Apple's own processing, see Apple's privacy policy and the App Store privacy disclosure.

Your rights

Even though we do not actively collect personal data, you have the following rights with respect to any personal data Advisiant might process. We grant these rights to all users worldwide, regardless of whether they are required by your local law:

• Right of access — ask whether we hold any personal data about you and receive a copy
• Right to rectification — request correction of inaccurate data
• Right to erasure / deletion / “to be forgotten” — request deletion of any data we hold (GDPR Art. 17, CCPA § 1798.105, LGPD Art. 18, etc.)
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to non-discrimination (CCPA) — we will not penalize you for exercising any privacy right
• Right to opt out of sale/sharing (CCPA) — not applicable in practice, because we do not sell or share personal data with anyone
• Right to lodge a complaint — with your local data protection authority. In Norway: Datatilsynet. In the EEA: your national supervisory authority. In the UK: the Information Commissioner's Office.

To exercise any of these rights, email [email protected]. We do not charge a fee. We aim to respond within 30 days (the GDPR limit) but it can take up to 45 days where local law allows it. The email correspondence itself is processed under legitimate-interest grounds for the duration needed to handle your request, then deleted. Rights against Apple as a separate controller (Apple Account, App Store data) must be exercised directly with Apple.

International data transfers

Because no user data leaves your device, no international transfer of personal data takes place from Advisiant to any third country in connection with your use of the App.

When you contact us by email, that correspondence is processed by Microsoft 365 (Outlook / Exchange Online), which Advisiant uses as its email provider. Microsoft acts as our data processor under a Data Processing Addendum and EU Standard Contractual Clauses. Mailbox data for European tenants is primarily stored in the EU under Microsoft's EU Data Boundary commitment, although limited processing may occur in other regions for purposes such as anti-spam, security, and high-availability replication. See Microsoft's privacy statement for details.

Apple processes Apple Account and App Store data globally as part of its own infrastructure; Apple relies on Standard Contractual Clauses and other lawful transfer mechanisms for its own cross-border processing — see Apple's privacy policy.

Children's privacy

Fileforth is a developer/admin tool and is not directed to children. We do not knowingly collect any data from children.

Changes

If we change this policy we will update the "Last updated" date above. Material changes will also be noted in the app's release notes.

Contact

Questions? Email [email protected].