Privacy Policy

Last updated: 1 September 2026

This Privacy Policy describes how CELBKP (hereinafter, the "Application" or the "Service"), provided by InfoGuille (RUT 200100430018) (hereinafter, the "Provider"), handles its users' information. The Service copies files —photographs, videos and, if the user so chooses, the other files in the folders they select— from the user's mobile device to a computer they own.

1. General principle: your files are yours

The Service is designed around the principle of data minimisation. Its purpose is to transfer files from the user's phone to the user's own computer. The Provider does not permanently store the content of your files, nor does it access that content.

2. Information processed

2.1. User content (files backed up)

• Local mode (your own Wi-Fi network): files are transferred directly between the user's phone and computer, within the same network. This content never passes through the Provider's servers. The transfer is encrypted and signed with the pairing key, so that no other device on the same network can read it or impersonate the destination computer.
• Web mode (outside the local network): when the phone is not on the same network as the computer, files transit through an intermediate server operated by the Provider on a temporary basis, and are deleted automatically once the user's computer confirms receipt. This content travels end-to-end encrypted, using a key that remains under the user's exclusive control and is not transmitted to the Provider; consequently, the Provider cannot read, view or recover the content of the files.

2.2. Account and licence data (business tier)

For the business tier, the Provider processes the information required to identify the account and validate the current licence. Depending on the sales channel, payment is processed through Google Play or by direct invoicing using the available payment methods. In neither case does the Provider receive or store the user's card details: only confirmation of the licence status.

2.3. Technical and operational data

• A device identifier generated by the Application itself (not the IMEI, not an advertising identifier), used to pair the phone with the user's computer.
• Transfer metadata in web mode (date, size and status of the operation), for the purposes of providing and invoicing the Service. The Provider does not access the content of the associated files.
• The IP address used while connecting to the intermediate server.

3. Device permissions and their purpose

• Photos and videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO): this is the Service's core permission. It is used solely to read the photographs and videos the user chooses to back up and send them to their computer. It is not used for any other purpose.
• All files access (MANAGE_EXTERNAL_STORAGE): requested only if the user chooses to back up documents or other file types beyond the gallery, since Android provides no other way to read them. It is used solely to read the files in the folders the user has selected and send them to their computer. The Application does not scan or transmit folders that were not selected. If the user does not grant this permission, the Service still works with photographs and videos.
• Foreground service and notifications (FOREGROUND_SERVICE, POST_NOTIFICATIONS): allow instant backup to run while showing a persistent notification with its status, and report the progress of each copy.
• Start on boot (RECEIVE_BOOT_COMPLETED): resumes automatic backup after the phone restarts, if the user left it enabled.

4. Purpose and legal basis

Data is processed for the purpose of providing the backup service requested by the user and, in web mode, of managing and invoicing the licence. The basis for processing is performance of the contracted service and the user's consent, expressed through use of the Application and the granting of the corresponding permissions.

5. Retention

• Web mode content is retained temporarily, only until the user's computer confirms its download, at which point it is deleted. Content that is never downloaded is deleted automatically after a reasonable period.
• Account and billing data is retained for as long as the licence is active and for the periods required by applicable law.

6. Disclosure to third parties

The Provider does not sell or transfer users' personal data for commercial purposes. Only those suppliers strictly necessary for the operation of the Service are involved, acting as data processors:

• Google Play (distribution of the Application and subscription processing).
• The hosting provider of the web mode's intermediate server.

7. Security

All transferred content —in local mode as well as in web mode— is protected with end-to-end AES-256-GCM encryption, using a key that is generated on the user's computer, transmitted to their phone solely through the pairing QR code and never disclosed to the Provider. Encryption is not optional: without a pairing key the Application performs no transfer at all. Each transfer is also signed with that same key, so the destination computer only accepts files from the paired phone.

Pairing credentials are stored encrypted on the phone and are excluded from the operating system's automatic backups, so they are never replicated to any cloud service.

The user acknowledges that, as a result of this encryption, losing their key will make the content unrecoverable. The Provider applies reasonable technical measures to protect the information under its control.

8. User rights

The user may request access to, rectification of or deletion of their account data, as well as cancellation of the licence, by writing to the contact address below. Since local mode content and the encrypted web mode content are not accessible to the Provider, managing those files is the user's exclusive responsibility, on their phone and on their computer.

9. Minors

The Service is not directed at minors and does not knowingly collect information from persons who lack the legal capacity to accept the Service's terms.

10. Changes to this Policy

The Provider may amend this Policy. Amendments will be announced on the Service's website and take effect upon publication.

11. Contact

To exercise your rights or ask questions about this Policy, please contact the Provider by email at mail@celbkp.com.