Privacy Policy

Last updated: November 10, 2026

CloudMount (“the app”, “we”, “us”) is an application for Android and Windows published by Limetric. This policy explains what data the app handles and how. The app is built so that your files and credentials remain under your control and are never sent to Limetric: CloudMount has no server backend that stores or relays them. Unless a section says otherwise, it applies to both versions of the app.

Your drives, credentials, and files

CloudMount connects to cloud storage providers (“drives”, which rclone calls “remotes”) using rclone. When you add a drive, its configuration — including any access tokens obtained through on-device sign-in — is stored locally on your device in an rclone configuration file. You can optionally encrypt this file at rest using a password wrapped by an Android Keystore key.

On Windows, the configuration file is kept in your Windows user profile. You can encrypt it with a password; if you let the app remember that password, it is stored encrypted by Windows for your user account. Files you open from a drive are downloaded to your computer as you use them, and stay there until you free up space or remove the drive.

These credentials are used solely on your device to talk directly to the cloud provider you chose. They are never transmitted to, or stored by, Limetric. We operate no server that receives your files or credentials. When you browse, upload, download, move or delete files, those operations happen directly between your device and your cloud provider over your own network connection.

On Android, system backup is off by default. If you explicitly enable it in the app’s Settings, Android may copy the rclone configuration, including its credentials, to an end-to-end encrypted private backup in your Google Drive account or transfer it directly to a new device. Cloud backup is included only when Android reports that client-side encryption is enabled; direct device-to-device transfer is handled separately. Google, your device manufacturer, and your Android backup settings control the backup transport, schedule, retention, and restoration. You can disable future copies at any time with the same in-app setting.

If you use Export configuration, the app decrypts the configuration and saves it to the document location you choose. Choosing a cloud-backed document provider sends that exported copy to that provider. Exported copies are outside CloudMount’s control and must be secured or deleted at their destination by you.

If you remove a drive or uninstall the app, its stored configuration is deleted from your device.

Scanning and text recognition on Android

Scan document uses Google’s ML Kit document scanner, andCloudMount then reads the scanned pages’ text with ML Kit text recognition, so the PDF can be searched. Restoring a vault from its recovery kit’s QR code uses ML Kit’s code scanner. These run on your device through Google Play services, which downloads the models they need. Your images, documents and their text are not sent to Google or toLimetric.

The text is added to the scan’s PDF as an invisible layer and uploads with it to the drive you chose, like the rest of the file. In a vault, it is encrypted on your device first. Anyone who can read the file on that drive, including your provider, can read the text too.

ML Kit collects diagnostics and usage data about these features through Google Play services: device and app information, device and per-installation identifiers, performance metrics, settings such as image size, and error codes. Google describes it inML Kit’s data disclosure, and handles it under theGoogle Privacy Policy.

Cloud provider sign-in (OAuth)

Signing in to a provider such as Google Drive, Dropbox or OneDrive is performed on your device. The resulting access and refresh tokens are stored locally as described above and are subject to the privacy policy and terms of that provider. Revoking access from your provider’s account settings, or using the app’s reconnect and remove actions, invalidates or removes those tokens.

Analytics and crash reporting

To understand how the app is used and to diagnose crashes, the app collects pseudonymous usage and crash data. On Android it integrates Google Firebase Analytics and Firebase Crashlytics, and also sends crash reports to a Sentry crash reporting server operated by Limetric itself (see below). On Windows it sends usage events to Google Analytics and crash reports to that same Sentry server. These may collect pseudonymous information such as:

• device model, operating system version, and language/region;
• app version and a randomly generated installation identifier;
• in-app events (for example, which screens are viewed or features used), without the contents of your files;
• crash diagnostics, including stack traces and device state at the time of a crash.

This data is used only to maintain and improve the app. It does not include your file contents, file or folder names, drive names, server addresses or cloud credentials. Usage data is processed by Google on our behalf, and Google’s handling of it is governed by the Google Privacy Policy. It is never used for advertising. Neither app collects your device’s advertising identifier.

You can turn off usage and crash data at any time: on Android under Settings › Security and privacy, and on Windows with Share usage and crash data, which is also offered when you first start the app, under Settings › Privacy. Turning it off stops both analytics and crash reports.

On Android

• Crash reports go to Firebase Crashlytics and, except for crashes in the app’s native rclone engine, also to the Sentry server operated by Limetric, not to a third party. A Sentry report holds the type of error and where in the app’s code it happened, your device model, Android version and language, the app version, a random identifier created when the app is installed, and the usage events that led up to the crash. Error messages, which can name files, folders and servers, are removed before a report is sent. Sentry reports don’t include screenshots or your device’s name, and the app doesn’t add your IP address to them.
• Crashes and app freezes that happen while usage and crash data is turned off are never sent to Sentry, even if you turn it back on later, and reports waiting to be sent are deleted when you turn it off.

On Windows

• Usage events (for example, that a drive was added and its storage type, or that an import failed and the general kind of error) are sent to Google Analytics, collected in the EU. They carry a random identifier created when the app is installed, your Windows version and display language, and the country set in Windows’ region settings. Google Analytics does not receive your IP address location from these events.
• Crash reports from the app and from its sync engine are sent to a Sentry server operated by Limetric, not to a third party. A report holds the type of error and where in the app’s code it happened, your Windows version, the .NET runtime and display language, the app version, the same random identifier, and the usage events that led up to the crash. Error messages, which can name files, folders and servers, are removed before a report is sent. Reports don’t include your computer’s name or your Windows user name, and the app doesn’t add your IP address to them.
• Crashes that happen while usage and crash data is turned off are never sent, even if you turn it back on later.

This website

cloudmount.app counts page views with Plausible Analytics, on a server operated by Limetric rather than a third party. It sets no cookies and stores nothing in your browser. Each page view sends the page address, the referring site, and your browser, operating system and screen size. Your IP address is used only to estimate your country and, with your browser, to count unique visitors per day through a hash that changes daily; the address itself is not stored. Only aggregate statistics are kept.

Purchases (CloudMount Pro)

CloudMount offers optional paid features and trials (“Pro”) through Google Play Billing. All payments are processed by Google Play; CloudMount does not receive or store your payment card details. Google provides us with limited purchase-status information needed to unlock and validate your entitlement. Purchases are governed by Google Play’s terms and privacy policy.

Permissions on Android

CloudMount requests Android permissions only as needed to function, for example:

• Network access — to connect to your cloud providers.
• Notifications and foreground service — to keep uploads running reliably after you leave the app.
• Biometric / device credential — for the optional app lock. Authentication is handled by Android; CloudMount never receives your biometric data.

Access to your cloud files is provided through Android’s Storage Access Framework: CloudMount acts as a document provider so other apps can reach your drives only with your consent.

Data retention and deletion

You can delete configuration and credentials from the current device by removing a drive or uninstalling the app. If System backup was enabled for this installation—whether by you or by an earlier app version that enabled it by default—Android may retain its separate private backup until Google or your device’s backup service deletes or replaces that backup according to its policies. Disabling the in-app setting prevents CloudMount from including the configuration in future backup passes. Manually exported copies remain wherever you saved them until you delete them there. Analytics and crash data already collected are retained by Google according to Firebase’s and Google Analytics’ retention policies, and crash reports on our Sentry server for a limited period. You may contact us to request deletion of data associated with your installation where applicable.

Children

CloudMount is a general-purpose utility and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with an updated “Last updated” date.

Contact

Questions about this policy or your data? Email us at support@cloudmount.app.