Ruvinta Privacy Policy

Last updated: October 27, 2026 · Version 8

Summary

Ruvinta is a network file manager for iPhone, iPad and Mac. It does not collect data about you. There is no sign-up, no advertising, no tracking and no usage analytics. Ruvinta does not operate any server: files move directly between your device and the servers and services you choose. What the app stores stays on your device, except for the optional iCloud sync described below.

Who is responsible

Ruvinta is developed and published by João Pedro Oliveira, the developer named on Ruvinta’s App Store page, who is responsible for this policy. Because Ruvinta holds no data about you on any server, the developer never receives your files, passwords, connections or activity.

What stays on your device

• Your connections (name, address, user name and preferences), cached listings, sync and backup tasks, playback positions, previous-version deletion recovery records, and a local audit log of the kinds of actions taken in the app (never file names).
• Passwords, keys and sign-in sessions are kept in the system Keychain, never in the app’s database. The database itself is encrypted on the device.
• For native OneDrive recovery, Ruvinta keeps deletion receipts (file names, provider IDs and deletion status) in its encrypted local database, not in iCloud. They describe deletions made through Ruvinta, not the account’s entire recycle bin.
• MEGA cache: to open a MEGA account quickly, MEGA’s own software keeps a copy of the account’s folder tree (names and sizes, encrypted by MEGA’s software) on the device, protected by the system and excluded from backups. It is erased when you remove the connection.
• Resumable uploads: session details, content fingerprints and destinations of unfinished native uploads are kept in this device’s Keychain so the transfer queue can resume after a restart. They are removed once the upload is verified, or with the connection.
• Network and free space: to decide when transfers run, Ruvinta checks on the device whether it is online, on cellular data or in Low Data Mode, and asks the destination how much space is free before a copy. Neither is stored or sent anywhere.
• Spotlight (optional, per connection): only the connection’s name is added to the device’s search index, never its address, user name, folders or files.

Files and Finder

If you turn on Show in Files (Finder on the Mac) for a connection, the system’s file provider lists it there. Files you open through Files or Finder are kept as local copies that the system manages and may remove to free space; they are erased when you hide or remove the connection. To keep those lists current, Ruvinta checks the connection for changes every few minutes while the app is open and, on iPhone and iPad, when the system lets apps refresh in the background. Those checks go only to that connection’s server or service. Sensitive connections and connections that use a key on this device are never shown in Files or Finder.

Services you connect

Ruvinta talks directly to each service you add, using the access you grant. What you store with a service is governed by that service’s own privacy policy.

• Your servers (SMB, SFTP, FTP, WebDAV, S3, NFS): the app talks directly to the server you added. No one in between, including Ruvinta, receives that traffic.
• Google Drive, Dropbox and OneDrive: sign-in happens in the system browser; Ruvinta never sees your password. Authorizations stay on this device only. The app asks only for the access needed to list, read and write files, plus the account’s name (for Dropbox, through the account_info.read permission). Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• MEGA: you sign in inside the app with your MEGA e-mail, password and, if enabled, verification code. They go only to MEGA; the password is not saved. The resulting session is kept in this device’s Keychain. Ruvinta uses MEGA’s own software with its device statistics and automatic diagnostic reports turned off.
• Provider previews: thumbnails are requested directly from the connected service and cached in memory, never in iCloud. Private Google thumbnails may send the Google token only to the approved HTTPS host lh3.googleusercontent.com, without following redirects.
• Sharing and versions: creating a public link, sending an invitation, revoking access or restoring a version requires an explicit action and confirmation. Invitation addresses go to the provider, which may notify the recipient. Public links grant access according to the provider’s policy and may not expire. Optional Dropbox sharing requests sharing.read and, on writable connections, sharing.write. Google may require keeping a revision permanently before restoring it; this is confirmed separately.
• OneDrive native recovery (optional): turning it on requests the additional Microsoft permission Files.ReadWrite.All. Read-only connections never request it. Recovery and retention remain controlled by OneDrive.
• Changes on Dropbox: to learn about changes quickly, Ruvinta may wait on Dropbox’s notification service (notify.dropboxapi.com), which receives only an opaque cursor, never your token or files.
• File search: typing in the browser matches names on the device using folder listings from the connected service; it never downloads file contents for a name search. Queries and results stay in memory.
• iCloud (optional, off by default): syncs between your own devices the settings of your connections and, only if you turn on its own option, playback progress (as numbers, without file names). Everything is end-to-end encrypted with a key kept in your iCloud Keychain. Never files, file names or passwords (unless you mark a connection’s password for that).
• Online subtitles (optional, off by default): each step (the search, with title and language; the sign-in to your OpenSubtitles account; and the download of the chosen subtitle) shows exactly what will be sent and sends it to OpenSubtitles only after you confirm.
• Photo backup (optional): the photos you choose go only to the destination you configure.
• Document content search (optional, per folder): Ruvinta reads the text of documents in the folders you choose and keeps the index only on this device, never in iCloud. Optional summaries use Apple Intelligence on the device; nothing goes to an AI service.
• AI agents (optional, off by default, Mac): an AI app you connect sees only the folders you allow, and anything it reads goes to that app’s AI provider under its own terms. Every change needs your confirmation.
• File Sharing and Nearby (optional): files go directly between your devices over the local network or Wi‑Fi Aware, only while you keep sharing or receiving on.

What Ruvinta does not do

• It does not collect, sell or share personal data.
• It does not use advertising, usage-analytics SDKs, advertising identifiers or cross-app or cross-site tracking.
• It does not read your files for any purpose of its own.

Permissions

The app asks for no permission when it opens. System permissions (for example Photos for backup, or the local network to discover servers) are requested only when you use the feature that depends on them, and can be revoked at any time in system Settings. Face ID and Touch ID are handled by the system; the app only receives “yes” or “no”.

Keeping and deleting data

• Data stays on your device until you delete it. Removing a connection erases its passwords, sessions, keys, caches, Files and Finder copies and upload checkpoints, and revokes its cloud authorization when the provider allows it.
• Deletion uses the provider’s or system’s native trash when available, and its rules apply. Without native trash, permanent deletion requires explicit confirmation and automated sync deletions are blocked.
• In Privacy and data you can review counts of stored records, read the local log and choose Erase everything on this device (with two confirmations). Files in Local Documents, on your servers, in native trashes and in iCloud are not changed by that button; to stop using iCloud, use iCloud settings.

Crash reports

Ruvinta does not send crash reports or metrics. If you allow sharing analytics with developers in system settings, Apple may deliver aggregated reports to the developer without identifying you.

Your rights

Data protection laws such as Brazil’s LGPD and the EU’s GDPR give you rights to access, correct, export and delete personal data. Ruvinta holds none of your data outside your device and your iCloud, so there is nothing for the developer to hand over or delete; you exercise these rights directly in the app and in iCloud settings, and with each connected service for what you store there. You can still contact the developer at the address below.

Children

Ruvinta is not directed to children and does not collect data from anyone.

Changes

This policy is published at ruvinta.com/privacy, which always has the current version, and the app opens it from there. If it changes, the new version is published there with the date and version number above. Changes to what the app does with data only arrive with an app update.

Contact

Questions or privacy requests: privacy@ruvinta.com. Vulnerability reports follow the project’s security policy (security@ruvinta.com).