File Recovery - Restore Files
Privacy Policy
Effective October 12, 2026
This Privacy Policy explains how Byeshe (“we,” “us,” or “our”) handles information when you use File Recovery - Restore Files (the “Application”), a freemium Android app with advertising and optional paid features or subscriptions. Features and providers may vary by version, region, and configuration. No Application account is required. Contact play@byeshe.com for privacy questions.
File scanning and storage access
All-files access on supported Android versions, or legacy storage permissions on older versions, allows the Application to enumerate accessible shared-storage files and inspect names, paths, sizes, types, timestamps, media duration, and previews. Scan results can include existing images, videos, audio, documents, cached files, or other readable remnants; a scan result is not proof that a file was deleted. Android restrictions still apply to protected app directories.
Restore, recycle bin, and duplicate comparison
Selected files can be copied to recovery destinations, moved to the Application’s recycle-bin storage, restored, or permanently removed by your action. The recycle bin covers files you place there; it is not a system-wide monitor that automatically protects every deleted file. Duplicate-photo comparison uses local file information and image hashes or thumbnails. We do not upload file contents or image hashes to a Byeshe scanning server.
Vault and authentication
Vault import copies selected media into app-private files and may remove the shared original as part of the import operation. Metadata is stored in the local database. Optional Android biometric or device-credential authentication controls access to the vault interface; the Application receives authentication success or failure, not your fingerprint, face template, or device credential. A vault interface lock is not a promise of separate encryption of each file.
Android permissions
Optional permissions can be declined or revoked in Android settings. Features depending on that access may be limited. Reading this policy does not grant permission, and revoking access does not automatically erase saved records.
| Permission | Purpose and scope |
|---|---|
android.permission.ACCESS_ADSERVICES_AD_ID | Allow integrated advertising services to use supported Android advertising identifiers, attribution, topics, or custom audiences, subject to system privacy controls. |
android.permission.ACCESS_ADSERVICES_ATTRIBUTION | Allow integrated advertising services to use supported Android advertising identifiers, attribution, topics, or custom audiences, subject to system privacy controls. |
android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE | Allow integrated advertising services to use supported Android advertising identifiers, attribution, topics, or custom audiences, subject to system privacy controls. |
android.permission.ACCESS_ADSERVICES_TOPICS | Allow integrated advertising services to use supported Android advertising identifiers, attribution, topics, or custom audiences, subject to system privacy controls. |
android.permission.ACCESS_NETWORK_STATE | Check network connectivity for app and integrated-service requests. |
android.permission.ACCESS_WIFI_STATE | Allow integrated libraries to read permitted Wi-Fi technical state; this does not expose Wi-Fi passwords. |
android.permission.FOREGROUND_SERVICE | Allow declared foreground work where used by the app or integrated libraries; this permission alone grants no camera, microphone, or location access. |
android.permission.INTERNET | Connect to advertising, configuration, analytics, attribution, billing, and diagnostic services. Feature-specific network use is explained above. |
android.permission.MANAGE_EXTERNAL_STORAGE | User-granted all-files access to accessible shared storage for file discovery, recovery, recycle-bin operations, and duplicate analysis. It does not bypass Android’s protected app directories. |
android.permission.READ_BASIC_PHONE_STATE | Allow integrated libraries to read basic cellular and software state; this does not grant access to contacts, call logs, or call audio. |
android.permission.READ_EXTERNAL_STORAGE | Read accessible shared files on older Android versions where granted. |
android.permission.USE_BIOMETRIC | Use Android authentication for the optional vault lock; biometric templates are handled by Android. |
android.permission.USE_FINGERPRINT | Legacy Android authentication support; the app receives an authentication result, not fingerprint data. |
android.permission.VIBRATE | Provide haptic feedback where used. |
android.permission.WAKE_LOCK | Support limited ongoing work or integrated-library scheduling; it does not grant access to personal records. |
android.permission.WRITE_EXTERNAL_STORAGE | Copy, restore, move, or remove accessible shared files on older Android versions where granted. |
com.amazon.privacypass.ATTEST | Allow integrated advertising services to use authenticity or fraud attestation where supported. |
com.android.vending.BILLING | Google Play purchases and subscription entitlement checks; Google handles payment credentials. |
com.android.vending.CHECK_LICENSE | Store-license verification where used by integrated libraries. |
com.byeshe.filerecoveryx.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | An AndroidX signature-level guard for internal broadcasts; no additional access to personal records. |
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE | Obtain installation source and click or installation timing from Google Play for attribution. |
com.google.android.gms.permission.AD_ID | Access the resettable advertising identifier for advertising, measurement, attribution, and fraud prevention, subject to Android privacy controls. |
Local storage, backup, and support
Recycle-bin and vault metadata include names, paths, types, sizes, media durations, and timestamps. Vault files and settings are stored locally. Recovery or export destinations can be shared storage. Android backup and device-transfer features may include eligible app data, depending on your device and backup settings. This is separate from a Byeshe server upload. Manage backup copies through Android or your backup provider.
If you contact support, we receive your email address, message, and attachments you choose to send. We use them to respond and resolve your request.
Advertising and privacy choices
The ad-supported version uses Google AdMob and mediation partners. They may process IP address, approximate region, advertising and app identifiers, device and operating-system information, network state, ad requests, impressions, clicks, interactions, and diagnostics. Processing supports ad delivery, measurement, attribution, personalization where permitted, security, and fraud prevention. Non-personalized ads can still involve technical data processing.
Google’s User Messaging Platform handles advertising consent where applicable. When required and available, you can revisit consent through Settings → Privacy options. Availability depends on region, provider, and configuration. You can also adjust Android advertising privacy settings, including advertising ID and supported advertising features. An ad-removal purchase changes ad display according to its offer; configuration, purchase validation, analytics, and other technical communications can continue.
Advertising partners may include Google AdMob, Meta Audience Network, AppLovin, Pangle, Liftoff Monetize (Vungle), Mintegral, InMobi, BidMachine, and Unity Ads and ironSource. Providers serving a particular request depend on mediation configuration and availability.
Analytics, configuration, attribution, and diagnostics
Firebase Analytics is enabled by default. It can process launches, sessions, screen views, feature interactions, settings changes, ads, and purchases, together with app-instance or available advertising identifiers, app version, device information, and approximate region. We use it to understand use, improve features, and measure conversions. Feature events can include media categories, filters, selected-item counts, and scan duration or result status. Error events may include truncated exception-message text, which can contain file or path context. We do not intentionally attach recovered-file contents, private media, or a complete file inventory to advertising or Analytics inputs.
Firebase Remote Config retrieves app and advertising configuration using installation identifiers and technical requests. Firebase Crashlytics uploads crash and non-fatal error diagnostics, such as traces, error messages, identifiers, app version, and device state. Reports may be cached until a later launch and are not guaranteed to be anonymous. The Application has no dedicated in-app switch for Analytics or Crashlytics.
Google Play Install Referrer supplies installation source and click or installation timing. Meta App Events and TikTok Business services may process installation, launch, and conversion events and available identifiers depending on configuration. Purchase events can include order or transaction identifier, product, quantity, currency, and attributed value, which can differ from the amount charged. See Firebase privacy information, Google’s Privacy Policy, Meta’s Privacy Policy, and TikTok’s Partner Privacy Policy.
Purchases and subscriptions
Google Play processes payments. The Application and purchase services may process product identifiers, purchase tokens, order identifiers, purchase time, subscription status, and entitlements to acknowledge purchases, restore access, prevent fraud, and provide support. We do not receive your full payment-card number or payment credentials. Purchase conversion events may be sent to Firebase Analytics, Meta, and TikTok as described above. Clearing app data or uninstalling does not cancel a subscription.
Sharing, external destinations, and international processing
Advertising, technical, attribution, and purchase information is processed by the providers above for the described purposes. We may disclose information held by us to providers assisting us, where legally required, to protect rights and safety, or in a business transfer subject to applicable protections. Providers may process information outside your country under their policies and applicable safeguards. Opening or sharing a file exposes it to the selected viewer, recipient, or storage provider under that provider’s policy.
These pages use Firebase Hosting, which processes IP addresses and technical requests for delivery and security. The pages contain no advertising or analytics scripts, external fonts, or tracking cookies.
Retention, deletion, and your rights
Local vault and recycle-bin records have no automatic time-based expiry. Use their controls to restore/export files before deleting them. Clearing app storage or uninstalling can permanently remove vault files and app-private records; it does not erase recovered copies in shared storage, external recycle-bin folders, shared copies, or backups. Delete those separately. Revoking storage access stops further access but does not erase files already copied.
Support correspondence and purchase-related information held by us are retained as needed to resolve requests, maintain entitlements, prevent fraud, and meet legal obligations, then deleted when no longer needed. Advertising and technical providers have their own retention periods. Local deletion does not recall events or diagnostics already sent, erase store transaction history, or cancel subscriptions.
Contact play@byeshe.com to request access, correction, deletion, or rights available in your location, including objection, restriction, portability, or withdrawal of consent. We may need to verify your request. We cannot remotely retrieve or delete information held only on your device. Contact us for help with information processed on our behalf; providers’ independent processing follows their policies. You may also contact your local data-protection authority.
Security and children
We use reasonable safeguards, but no storage or transmission is completely secure. Protect your device, email, and backups. The Application is not directed to children under 13. Minors must meet applicable age requirements and obtain guardian permission where required. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
Changes and contact
We may update this policy and its effective date when features or data practices change, with additional notice or consent where required. For privacy questions, contact Byeshe at play@byeshe.com.