FolderyMenu & FolderyMenu GO Privacy Policies

FolderyMenu Privacy Policy — macOS

FolderyMenu organizes and opens files, folders, applications, and web links from your Mac menu bar. This section applies to the Mac app; the separate FolderyMenu GO policy below covers direct cloud connections on iPhone and iPad.

File access and permissions

FolderyMenu accesses locations you authorize through Apple's native macOS file permissions and security-scoped bookmarks. These may include individual or parent folders, external drives, and locally available folders synced by iCloud Drive, Box, Google Drive™, OneDrive™, Dropbox, or another provider that exposes a browsable Finder location. Access to a parent folder can include its contents. FolderyMenu does not bypass macOS security protections.

The app uses file and folder names, paths, types, and metadata such as modification dates to display and organize your menus. It also uses the applications and web links you add. Opening an item passes it to the application or browser you choose.

Local storage and your controls

Menu items, sorting and filtering preferences, pinned items, appearance settings, and file-access bookmarks are stored locally on your Mac. Backups that you create or restore are stored in the location you choose; a cloud-synced location is handled by its storage provider. If you enable FolderyMenu GO sync, the limited app data described in the next section is also stored in your private Apple CloudKit database.

We do not operate servers that receive or store your files, folder contents, metadata, or app configuration. You can remove saved items in FolderyMenu and manage applicable macOS permissions in System Settings. Remove local app data and any backups you created when you no longer want them. Removing a menu item does not delete the original file.

Cloud providers on the Mac: Finder integration, not FolderyMenu OAuth

FolderyMenu for Mac does not sign in to Box, Dropbox, Microsoft, or Google and does not receive OAuth tokens for those services. Except for iCloud Drive, you install and sign in to the provider's Mac app. The provider then makes authorized content available in Finder, commonly through Apple's File Provider system. FolderyMenu reads only the Finder files and metadata within the file or folder access you grant through macOS.

• iCloud Drive: built into macOS and governed by Apple's Privacy Policy.
• Box Drive: Box authenticates and synchronizes the Finder location. See the Box Privacy Notice.
• Dropbox for Mac: Dropbox authenticates and synchronizes the Finder location. See the Dropbox Privacy Policy.
• Microsoft OneDrive for Mac: Microsoft authenticates and synchronizes the Finder location. See the Microsoft Privacy Statement.
• Google Drive for desktop: Google authenticates and synchronizes the Finder location. See Google's Privacy Policy.

FolderyMenu uses these Finder locations to display and organize the items you choose. It does not ask the provider for separate API access, does not expand the access granted to the provider's own Mac app, and does not send file contents to FolderyMenu-operated servers. macOS permissions, the selected Finder location, and the provider account's own permissions determine what is available.

Optional FolderyMenu GO sync through CloudKit

If you turn on Sync to FMGo, FolderyMenu uses Apple's CloudKit service to make supported FolderyMenu data available to FolderyMenu GO on devices using the same iCloud account. The synchronized data may include saved menu configurations, item names and stable item metadata, filter settings, pinned items, and supported result-list snapshots. It is linked to your iCloud account because CloudKit stores it in your private database.

This sync does not upload the contents of your local files, macOS security-scoped bookmark data for use on iPhone or iPad, provider OAuth tokens, account credentials, authorization headers, protected download links, or temporary local file locations. Supported records may include portable iCloud paths, stable Box or Dropbox item identity, item names and metadata, and approved result snapshots. Synced Google Drive or Box result records may include HTTPS destinations needed to display and open those results in FolderyMenu GO.

The synchronized data is used only to provide app functionality. We do not use it for advertising, marketing, analytics, profiling, or tracking, and we do not sell it. Apple stores and processes the data through CloudKit under Apple's Privacy Policy.

You can stop future synchronization by turning off Sync to FMGo. You can also use FolderyMenu's reset or sync-removal controls to remove the Mac-owned synchronized data from CloudKit. Turning sync off by itself does not necessarily delete data that was already synchronized unless you choose the removal option. Local settings, manual backups, downloaded files, and original files remain until you remove them separately.

FolderyMenu GO Privacy Policy — iOS

FolderyMenu GO helps you browse, organize access to, open, and download files from Box, Microsoft OneDrive™, Dropbox, and iCloud Drive on your iPhone or iPad. Box, OneDrive, and Dropbox connections are optional OAuth integrations. iCloud Drive uses Apple's native file-access interfaces. Curated Google Drive™ results arrive through optional Mac sync as described below rather than through a direct Google OAuth connection in FolderyMenu GO.

Box: sign-in and read-only access

When you connect Box, Box handles sign-in and consent. FolderyMenu GO receives OAuth tokens that let it make authorized Box API requests; a refresh token, if issued, maintains the connection. The app does not receive or store your Box password.

FolderyMenu GO requests the minimum Box access that supports its current features: reading basic connected-account identity, listing file and folder metadata, and downloading a file when you choose to preview, share, or open it. We do not use Box access to upload, create, edit, move, rename, or delete Box content. Box scopes operate together with your existing Box permissions and any controls imposed by your organization. See Box's security and scopes documentation and the Box Privacy Notice.

The Box consent screen describes the access requested. Depending on Box's available permission model, read access may cover content available to the connected account rather than only a folder later selected in FolderyMenu GO. The app uses that access only when needed for the visible file-browsing and file-opening features described here.

Disconnect Box inside FolderyMenu GO to remove locally stored Box authorization data. You can also revoke the integration from your Box account's Integrations settings; Box explains this in Managing Box Integrations. An organization administrator may separately restrict or revoke integrations.

Google Drive™ results from Mac sync

FolderyMenu GO does not currently request Google OAuth access. FolderyMenu for Mac reads the Google Drive for desktop location you authorized through Finder and may place a curated, read-only result snapshot in your private CloudKit database. A snapshot may contain item names, stable identifiers, file metadata, and an HTTPS Google Drive destination. It does not contain your Google password, OAuth token, authorization headers, or file contents.

Opening a synced Google Drive result sends its HTTPS destination to Google Drive or your browser. Google handles that request under Google's Privacy Policy. Disable or remove Mac sync data to stop receiving these snapshots; manage Google Drive for desktop and its account access separately on the Mac.

OneDrive™: Microsoft sign-in and OAuth

When you connect OneDrive™, the Microsoft identity platform handles sign-in and consent. FolderyMenu GO uses OAuth tokens and Microsoft Graph delegated permissions to act on behalf of the signed-in user, within the access approved by you or your organization. Refresh tokens, if issued, maintain that authorized connection. The app does not receive or store your Microsoft password.

We request least-privileged delegated permissions sufficient to identify the signed-in account, maintain the connection, read file and folder metadata, and retrieve files you choose to open or download. We do not request application-only access or permission to read Outlook email messages, contacts, or calendars. We do not use OneDrive permissions to modify or delete cloud content. Microsoft recommends least-privileged delegated permissions for interactive apps; see Microsoft Graph permission best practices.

Account identifiers, email addresses, or display names returned by Microsoft are used only to identify the connected account and manage access. For a work or school account, an administrator may control consent and access, and the connected user's existing permissions continue to limit what FolderyMenu GO can read.

OneDrive™ data is handled within your consent and the Microsoft APIs Terms of Use, Microsoft identity platform requirements, and Microsoft Privacy Statement.

Disconnect OneDrive inside FolderyMenu GO to remove locally stored Microsoft authorization data. You may also revoke permissions in your Microsoft account's app-access settings. For work or school accounts, use the My Apps portal instructions or contact your administrator.

Dropbox: sign-in and read-only access

When you connect Dropbox, Dropbox handles sign-in and asks you to authorize access through its OAuth consent flow. FolderyMenu GO uses OAuth access tokens to make authorized Dropbox API requests. A refresh token, if issued, allows the app to renew that access. The app does not receive or store your Dropbox password.

FolderyMenu GO requests only read scopes needed for the current features: basic account information, file and folder metadata, and file content when you choose to open or download it. Write scopes are not enabled. The app cannot upload, create, edit, move, rename, or delete files or folders in Dropbox. Dropbox recommends minimal access in its OAuth Guide. Any account information returned by Dropbox is used only to identify the connected account and manage the connection.

The Dropbox consent screen describes the extent of the access you authorize. Read-only access may cover more than the folder you select in FolderyMenu GO; selecting a folder in the app does not narrow the underlying Dropbox permission. We use Dropbox data only as you authorize and as necessary for the connection and file-access features described in this policy.

We, the developer of FolderyMenu GO, are responsible for the privacy, security, and integrity of Dropbox data accessed or handled by our app. The storage, transmission, sharing, retention, and deletion provisions below apply to Dropbox data and authorization tokens. Dropbox operates its own service under the Dropbox Privacy Policy.

To revoke access, open Dropbox on the web, go to Settings > Apps, select FolderyMenu GO, and choose Disconnect. See Dropbox's instructions for managing connected apps. Reconnecting requires you to authorize the app again. Disconnecting does not delete your Dropbox originals or previously downloaded copies; remove local copies as described below.

iCloud Drive: Apple's native APIs

FolderyMenu GO accesses iCloud Drive through Apple's native iOS file-access APIs and system file-selection permissions. Apple manages your Apple Account sign-in and iCloud connection on your device. This is not a separate Google-style or Microsoft-style OAuth login, and FolderyMenu GO does not receive your Apple Account password.

The app accesses the files and folders you authorize through Apple's system interfaces. iOS manages the permitted access and any downloading needed to make an iCloud file available locally. Apple handles iCloud storage and synchronization under your device settings.

To remove iCloud Drive access, remove saved file or folder references in the app and manage iCloud Drive availability through your device's Apple Account settings. Apple processes iCloud data under Apple's Privacy Policy and its iCloud terms.

FolderyMenu sync through CloudKit

If FolderyMenu GO sync is enabled in FolderyMenu for Mac, FolderyMenu GO retrieves supported menu configuration, item metadata, filter settings, pinned items, portable provider identities, and result-list snapshots from your private Apple CloudKit database. This data is used only to display and operate your synchronized FolderyMenu items. FolderyMenu GO does not receive the contents of your Mac files, Mac security-scoped bookmarks, provider account credentials, OAuth tokens, authorization headers, or protected download links through this sync.

You can stop publishing future updates from FolderyMenu for Mac and use its reset or sync-removal controls to remove Mac-owned synchronized data from CloudKit. You can remove local imported items and app data using FolderyMenu GO's controls or by deleting the app. Apple handles CloudKit storage under your iCloud account and its privacy policy.

Minimum permissions and limited purposes for all cloud connections

FolderyMenu GO requests only the minimum provider permissions needed to sign you in, maintain your authorized connection, and provide the browsing, opening, and downloading features you choose to use. We periodically review requested scopes against the current features and provider guidance. We do not request a write scope merely because a provider offers it, and we do not request permissions for unrelated or speculative future features.

The provider's consent screen describes the access being requested. File permissions may cover more than a single folder, depending on the provider's available permission model; choosing a folder in the app does not itself narrow an OAuth grant. The app uses authorized access only for the features described here. You may decline access, in which case features requiring that access will be unavailable.

FolderyMenu GO does not request cloud-file write, edit, or delete permissions for these features. It can open or download files, but editing must be performed in an external app and the edited version must be saved separately. FolderyMenu GO does not upload edits, overwrite cloud originals, or automatically save changes back to your drive.

Data accessed, stored, and transmitted

• Account information and authorization tokens: used on your device only to sign in, identify the connected account, and authorize API requests. These are not sent to or stored on our servers.
• File and folder information: names, identifiers, paths, types, sizes, dates, and thumbnails, where supplied, are used to display and navigate your authorized files. Saved references and any local caches support that functionality on your device.
• File contents: opening or downloading a file transfers its contents from the provider to your device or opens it with your chosen application. Temporary copies and files you explicitly save may remain locally.
• App settings: curated items, preferences, and file-access references are stored locally. Device backups or destinations you choose may be handled by Apple or another provider according to your settings.

Cloud sign-in and API requests communicate directly with Box, Microsoft, Dropbox, or Apple as needed to authenticate and retrieve the data you request. Opening a synced Google Drive HTTPS destination communicates with Google. Those providers receive the requests and associated connection information necessary to operate their services. We do not route your cloud files through our servers or maintain a server-side copy of your account information, tokens, file contents, metadata, or app settings.

Provider connections use encrypted transport (HTTPS/TLS); local app data is subject to Apple's device and app security protections. Protect access to your device and to any files you export. When you send a file to an external app, that app receives the selected file and handles it under its own privacy policy.

Sharing and data-use limits for all cloud connections

Cloud data is used only to provide the account connection and file-access features described above. We do not sell or rent it, use it for advertising or marketing, share it with data brokers or information resellers, use it for creditworthiness, lending, credit decisions, or surveillance, or use it to create unrelated databases. These limits also apply to data derived from cloud data.

We do not use connected cloud data, synced provider metadata, or file contents to develop, improve, or train artificial intelligence or machine-learning models.

Our staff do not have access to your connected cloud files through our servers. Files are passed to another app only when you choose to open or share them there. We do not provide cloud data to third parties for unrelated purposes.

Retention, revocation, and deletion for all cloud connections

Account connection information is used only while needed to maintain the connection you authorize. Saved items and settings remain on your device until you remove them or delete the app's local data. Downloaded or exported copies remain where you save them until you delete them. We retain no server-side cloud-account or file data to delete.

Local data: remove saved items and downloaded copies you no longer need. To remove the app's local container, delete the app rather than offloading it. Separately delete files exported to Files or another app and any backups you control. Revoking access does not erase previously downloaded copies.

Once the provider makes a revocation effective, the app cannot use that authorization for further cloud access; provider token expiration and revocation rules determine when this takes effect. Revocation does not delete your original cloud files. You can view, correct, or delete those originals and your account details directly with the provider. Changes to cloud originals do not automatically change copies you already downloaded.

Privacy information for both apps

Other services and tracking

The apps do not use third-party advertising trackers. Opening web links, using Apple's App Store purchase or subscription services, and accessing provider-managed cloud storage involve the respective services. This policy describes the apps; those services apply their own privacy policies, including the Box Privacy Notice, Dropbox Privacy Policy, Google Privacy Policy, Microsoft Privacy Statement, and Apple Privacy Policy.

Children's privacy

FolderyMenu and FolderyMenu GO are not directed toward children.

Changes to these policies

We update the date above when these policies change. If we introduce a new use of connected account or cloud data, we will explain it and obtain any required consent before that new use begins.

Privacy questions and requests

For privacy questions or help managing access and deleting local or synchronized app data, visit FolderyMenu's website and Help. We cannot access or delete original files held only on your device or by your cloud provider; use the controls described above to manage those files. FolderyMenu's sync-removal controls can delete the Mac-owned FolderyMenu data that the app placed in your private CloudKit database.