In one line
MultiDrive collects no data. There are no servers: the
program runs on your own device, encrypts before uploading and talks directly to your own
cloud accounts.
This is not a statement of intent, it is a consequence of how it is built. There is no
MultiDrive infrastructure your data could reach even if we wanted it to. The code is free
software (AGPL-3.0) and can be checked.
What it does with your files
- It cuts them into chunks and encrypts them on your device with
XChaCha20-Poly1305, using a key derived from a passphrase only you know.
- It spreads those already-encrypted chunks across the cloud accounts you have
configured.
- Filenames are encrypted too: the provider sees neither the structure nor what anything
is called.
- The passphrase is not stored and does not leave the process. If you
lose it, nobody —us included— can recover the volume.
- With one exception, on Android and only if you turn it on: automatic
folder upload needs the passphrase, because a job that starts on its own cannot ask you for
it. When you turn that on, the passphrase is sealed in the Android keystore,
encrypted by the phone's hardware and requiring the phone to be unlocked in order to be
decrypted. It does not leave the device. The app tells you this before you turn it on, it
ships turned off, and turning it off wipes the stored passphrase.
What it does with your Google account
When you link a Google Drive account, your browser opens on Google's own page. Your
password never passes through MultiDrive: it goes from your browser to Google, and
all that comes back is a single-use code exchanged for an access grant.
- One single permission is requested:
drive.file, which grants access
only to the files MultiDrive creates. It cannot see, read or touch the rest
of your Drive.
- That permission is used exclusively to store, read and delete the volume's encrypted
blocks. For nothing else.
- The token that allows it to be refreshed is stored on your own device,
in your user profile, with permissions that stop other users of the machine from reading it.
It is not transmitted anywhere except to Google when refreshing.
- On Android it lives in the app's private storage, which no other app can reach, and
Android's automatic backup is disabled on purpose: if it were not, the
system would have uploaded that file to your own Drive account by itself. Uninstalling the
app deletes it.
- You can withdraw the permission whenever you want from your Google account settings, or
by removing the provider from MultiDrive's configuration.
MultiDrive's use of information received from Google APIs adheres to the
Google API Services User Data Policy, including the Limited Use
requirements. Google data is not transferred to third parties, is not used for advertising and
is not read by any human being.
If you sign up for the testing
The front page has a form for getting into the Google Play testing. It is the only thing
on this site that collects anything of yours, so it is worth saying exactly what and what
for.
- What is kept: the email address you type and the date. Nothing
else.
- Your IP is not kept. To slow down automated submissions an
irreversible digest of it is used, which cannot be turned back into the address and which
is deleted after an hour.
- What for: to add you to the Google Play tester list. That list has to
be handed to Google, who send the invitation: there is no other way to give you access.
- Where: on the
multidrive.net server, in a file the web
site does not serve and that is given to nobody else.
- For how long: for as long as the testing phase lasts. When the app is
properly published, the list is deleted.
- To come off it: write to
gerencia@jlsoltech.com and it is deleted. No
explanation needed.
There is no newsletter and no other mail of any kind: the only thing that will reach that
address is Google's invitation.
What there isn't
- No telemetry, no usage statistics, no automatic crash reports.
- No MultiDrive accounts, no sign-up, no licence server.
- No ads and no profiling, and nothing is sold or handed to third parties, because there
is nothing to hand over.
- This website uses no cookies and no analytics.
Who you talk to
MultiDrive communicates only with the storage providers you have configured and with their
authentication services. That list is yours to decide, and the specific addresses are in the
code, not hidden.
What those providers do with what you upload is governed by their policies, not by
this one. What MultiDrive guarantees is that whatever arrives there was encrypted before it
left your device.