Privacy Policy

1. Overview & Purpose

This Privacy Policy describes how PicStow ("we", "our", or "the app"), developed by Priyanshu Maurya (package: com.priyanshumaurya.picstow), handles your information when you use our Android mobile application and website (https://picstow.app).

PicStow is a multi-account photo and video management application that connects directly to your personal Google Drive accounts. The core purpose of the app is to allow you to aggregate free cloud storage across up to 4 Google accounts (such as 15 GB free per account for up to 60 GB total), view a unified local and cloud photo timeline, and automatically back up your device camera media.

2. Google User Data & API Scopes

PicStow integrates with Google OAuth 2.0 and Google Drive APIs to provide cloud storage capabilities. We request the following specific scopes:

• Google Sign-In (openid, profile, email): Used strictly to authenticate your Google identity, display your account email and profile avatar within the app's account switcher, and secure session management. We never see or store your Google account password.
• Google Drive API (https://www.googleapis.com/auth/drive.file / drive.appdata): Used strictly to upload, retrieve, organize, and manage photos, videos, and collection metadata that you explicitly select for backup within your dedicated PicStow folder on Google Drive.

PicStow does not read, access, or modify any unrelated files or folders in your Google Drive outside the photos and folders created or managed by the app.

3. Device Media Permissions

To display and back up your on-device photos and videos, PicStow requests standard Android device permissions:

• Media Images & Videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO / READ_EXTERNAL_STORAGE): Required to scan your device gallery locally and present a chronological timeline alongside your cloud media.
• Internet Access (INTERNET, ACCESS_NETWORK_STATE): Required to communicate directly with Google Drive API endpoints over secure HTTPS connections.

PicStow does not use or request the Android Advertising ID (AD_ID), nor does it track your device location.

4. Direct Storage & No Third-Party Sharing

We do not sell, rent, trade, or monetize your personal data or photos.

PicStow operates on a Direct Device-to-Cloud architecture:

• All photo and video uploads and downloads happen directly between your Android device and Google's official API servers.
• There are no intermediate proxy servers, cloud relay databases, or analytics logging services that intercept or store your media.
• We do not share your Google user data with any third-party AI models, advertisers, or data brokers.

5. Google API Limited Use Disclosure

PicStow's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Retention & User Control

You maintain total ownership and custody over your photos and Google accounts:

• Google Drive Storage: All backed-up files reside inside your own personal Google Drive. You can view, download, or delete these files at any time via the PicStow app or directly on Google Drive.
• Disconnecting Accounts: You can disconnect any linked Google account anytime from the app's account settings, which immediately deletes local authentication tokens stored on your device.
• Revoking App Access: You can revoke PicStow's access to your Google account at any time through your Google Account Security Settings.

7. Data Security

All network communication with Google APIs is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3 / HTTPS). OAuth access tokens are stored securely in protected on-device sandboxed application storage on Android.

8. Developer Contact & Inquiries

If you have questions, feedback, or data privacy inquiries regarding PicStow, please reach out directly: