Privacy Policy

Simple File Manager
Last updated: 29 October 2026

Simple File Manager ("the app") is developed by Lunarixus ("the developer"). This policy explains what the app does with your data.

Summary

The app does not collect your personal data. Nothing is sent to the developer or to any third party: the app contains no analytics, advertising, tracking or crash-reporting services, and the developer does not run any server that the app talks to. Your data is only sent off your device when you use a feature that does so, and only to a destination you choose, as described below.

What the app accesses on your device

• Files and folders on your device's storage, including "All files access" if you grant it, so the app can browse, open, edit, copy, move, rename, delete, compress, extract and install them. This happens on your device.
• Notifications, to show the progress of file transfers and whether the web server is running.
• Network access, used only by the features described under "Features that send data off your device".
• Root or Shizuku access, only if you grant it, to reach files the app could not otherwise access. Commands run on your device.

Data stored on your device

The app keeps your settings, home screen shortcuts, a list of recently opened files, saved network shares and the identities of servers you have connected to. Passwords for saved network shares are encrypted with a key held in your device's secure hardware (Android Keystore).

This data stays on your device. If Android backup is turned on for your device, Android may include it in your device backup, which is handled by Google under your backup settings; saved passwords can only be decrypted on the device that encrypted them.

Features that send data off your device

These features only run when you use them, and only send data to destinations you choose:

• Network shares (SMB, FTP, FTPS, SFTP, SCP and WebDAV). The app connects to servers you add. Your username and password are sent to that server to sign in, and files you open or copy are transferred between your device and that server. FTP and WebDAV over http:// are not encrypted.
• SFMShare. While SFMShare is turned on, the app announces this device's SFMShare name on your local network so nearby devices can find it. Files you choose to send go only to the device you pick, end-to-end encrypted by default. Incoming files are only received after you accept them, and are saved to Downloads/SFMShare.
• Web server. While you have it running, devices on your local network can browse, download, upload, rename and delete files on this device through a web browser, protected by the password you set (required by default). The connection uses plain HTTP and is not encrypted. It stops when you stop it.
• Installing apps. Packages you open are passed to Android's package installer, or installed through root or Shizuku if you choose that method.
• Links. Opening the developer's page or a project page from Settings opens it in your web browser. Those websites have their own privacy policies.

Sharing and selling

The developer does not sell, rent or share your data, because the developer never receives it.

Data retention and deletion

The developer holds no data about you, so there is nothing to retain or delete on the developer's side. You can remove everything the app stores on your device by clearing the app's storage in Android settings or by uninstalling the app. Files you receive or create remain in your storage until you delete them.

Security

Saved passwords are encrypted with the Android Keystore. SFMShare transfers are end-to-end encrypted and show a verification code to compare on both devices. SSH host keys and self-signed FTPS certificates are remembered on first connection, and a change is reported before your password is sent.

Children

The app is not directed at children under 13 and does not knowingly collect data from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be published at the same address and in the app, with a new "Last updated" date.

Contact

For questions about this policy or your privacy, contact the developer using the email address shown on the app's Google Play listing, or through https://github.com/Lunarixus.