GBTechReviews

Your files go straight to your own account.

HCloud backs up your photos, videos and files to storage you already own — your Google Drive, your Google Photos, or your own WebDAV server. It has no servers of its own. Nothing passes through us, so we never receive, store or see any of it.

HCloud Privacy Policy · Last updated 26 August 2026
Your devicedirect, over HTTPSYour account
At a glance

The short version

  • HCloud operates no servers. Your files travel directly from your device to the destination you chose.
  • We never receive, read, view or analyse your files or photos.
  • No analytics, no tracking, no advertising, no personal data collection.
  • We never sell, share or transmit your data to any third party.
What it does

Backing up

You choose what gets backed up and where it goes. HCloud uploads it and does nothing else with it.

Google Drive. Files are uploaded into folders the app creates — named "HCloud" and "HCloud Files" unless you rename them. This uses the drive.file scope, which is limited strictly to files the app itself creates. HCloud cannot see or touch anything else in your Drive.

Google Photos. Photos and videos are added to your library using photoslibrary.appendonly. To show you what it has backed up, the app also lists items it added itself, using photoslibrary.readonly.appcreateddata. It cannot see, change or delete the rest of your library.

Your own WebDAV server. If you back up to a home NAS or similar, you supply the address, username and password, and the app uploads directly to that server. It is your server; we neither operate it nor have any access to it.

Automatic backup. Optional and off by default. Once you turn it on and grant photo access, the app looks for newly added photos and videos in the background and uploads them to the destination you chose, so you do not have to select them each time. You can turn it off again at any time in Settings.

On device

What is stored on your phone

All of this lives in the app's private, sandboxed storage, which other apps cannot read. None of it leaves your device.

  • Your Google sign-in token, so the app can upload without asking you to sign in each time.
  • Your WebDAV address, username and password, if you use that option. These are sent only to your own server, to sign in.
  • Your theme and appearance settings, and your notification preferences.
  • Backup counts and the time of your last backup.
  • A local index of the dates of your backed-up photos, so the optional "On this day" reminders can work.
  • If a backup is interrupted, the list of items still waiting, so it can carry on later.
Never

What we do not do

  • We run no servers, so your files never pass through anything we control.
  • We do not read, view or analyse your files or photos.
  • We collect no personal data, use no analytics, and do not track you.
  • We display no advertisements.
  • We do not share, sell or transmit your data to any third party.
Google data

How HCloud handles Google user data

Access. With your consent through Google sign-in, HCloud accesses your Google Drive limited to files and folders it creates (drive.file); the ability to add items to your Google Photos library (photoslibrary.appendonly); and a listing of the items it has itself uploaded to Google Photos (photoslibrary.readonly.appcreateddata). It cannot see any other content in your Drive or your Photos library.

Use. That access serves one purpose: uploading what you choose to your own account, and showing you what has been uploaded. Google user data is never used for advertising, analytics, profiling or anything else.

Storage. We operate no servers and store no Google user data. The only Google-related data on your phone is your OAuth token and a local record of what the app has uploaded, both in private sandboxed storage. Your files transfer directly from your device to Google and are stored only in your own account.

Sharing. HCloud never shares, transfers, sells or discloses Google user data to any third party. Nobody at GBTechReviews can read your data, because it never reaches us.

Retention and deletion. The token and local records are deleted when you disconnect Google inside the app, or when you uninstall it. You can revoke access at any time at myaccount.google.com/permissions.

HCloud's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security

How your data is protected

  • Every transfer between your device and its destination uses HTTPS. Nothing is sent over an unencrypted connection.
  • Your sign-in token and any WebDAV credentials are held only in the app's private sandboxed storage. They are never written to shared storage, logged, or sent anywhere other than the service they authenticate to.
  • Google sign-in uses OAuth 2.0 with PKCE. HCloud never sees, asks for, or stores your Google password.
  • Because there is no server behind HCloud, there is no database of user data that could be breached.
  • If a security issue is found, we will fix it promptly and update the app. Reports are welcome at the address below.
Permissions

What the app asks for

  • Internet — to upload your selected items to your own account or server.
  • Photo and video access (ohos.permission.READ_IMAGEVIDEO) — used only if you turn on Automatic backup, so the app can find newly added photos and videos. They are read solely to upload them.
  • Keep background running — so a backup in progress can finish if you leave the app or lock your screen.
  • Network information — only for the optional "Back up on Wi-Fi only" setting, to check whether you are on Wi-Fi.
  • Vibration — gentle feedback on taps inside the app.
  • Notifications (optional) — with your permission, local notifications for backup progress, completion, and "On this day" reminders. These are generated on your device and involve no server.
Control

Removing access and deleting data

Disconnect Google inside the app at any time and the stored token is removed from your device. You can also revoke access at myaccount.google.com/permissions. Clearing your WebDAV details removes those credentials. Uninstalling removes everything stored locally. Items already uploaded stay in your own account or on your own server, managed by you like anything else you keep there.

Scope

Children's privacy

HCloud is not directed at children under 13, or the relevant minimum age in their country or region, and does not knowingly collect information from them.

Updates

Changes to this policy

Any revision is published at this address with a new date at the top.

Questions about this policy huaweiproreview@gmail.com

您的文件，直接进入您自己的账户。

HCloud 会将您的照片、视频与文件备份到您本就拥有的存储空间——您的 Google Drive、您的 Google Photos，或您自己的 WebDAV 服务器。本应用没有自己的服务器，一切都不经我们中转，因此我们绝不会接收、存储或查看其中任何内容。

HCloud 隐私政策 · 最后更新 2026 年 8 月 26 日
您的设备经 HTTPS 直连您的账户
概览

简短版本

  • HCloud 不运营任何服务器。您的文件从设备直接传输至您选择的目的地。
  • 我们绝不接收、读取、查看或分析您的文件或照片。
  • 不含统计分析、不做追踪、不投放广告、不收集个人数据。
  • 我们绝不向任何第三方出售、分享或传输您的数据。
应用功能

备份方式

备份什么、备份到哪里，均由您决定。HCloud 只负责上传，不做任何其他处理。

Google Drive。文件会被上传到应用自行创建的文件夹中——除非您重命名，否则名为“HCloud”与“HCloud Files”。此功能使用 drive.file 权限，该权限严格限定于应用自身创建的文件；HCloud 无法查看或触及您 Drive 中的任何其他内容。

Google Photos。照片和视频通过 photoslibrary.appendonly 权限添加到您的媒体库。为向您展示已备份的内容，应用还会使用 photoslibrary.readonly.appcreateddata 权限列出其自身添加的项目。应用无法查看、更改或删除媒体库中的其他任何内容。

您自己的 WebDAV 服务器。若您备份到家庭 NAS 或类似设备，需由您提供服务器地址、用户名与密码，应用会将文件直接上传至该服务器。这是您自己的服务器，我们既不运营，也无任何访问权限。

自动备份。可选功能，默认关闭。开启并授予照片访问权限后，应用会在后台查找新增的照片和视频，并上传到您选择的目的地，无需每次手动选择。您可随时在设置中再次关闭。

本机存储

您手机上保存了什么

以下全部保存在应用私有的沙盒存储空间内，其他应用无法读取，也绝不会离开您的设备。

  • 您的 Google 登录令牌，以便应用上传时无需每次重新登录。
  • 若您使用 WebDAV，则包括您填写的服务器地址、用户名与密码。这些信息仅会发送至您自己的服务器用于登录。
  • 您的主题与外观设置，以及通知偏好。
  • 已备份数量与上次备份时间。
  • 已备份照片的日期本地索引，用于可选的“那年今日”回忆提醒。
  • 若备份被中断，则包括尚未完成的项目清单，以便后续继续。
绝不进行

我们不会做的事

  • 我们不运营任何服务器，您的文件绝不经过我们控制的任何环节。
  • 我们不读取、不查看、不分析您的文件或照片。
  • 我们不收集个人数据，不使用统计分析，也不追踪您。
  • 我们不展示任何广告。
  • 我们不向任何第三方分享、出售或传输您的数据。
Google 数据

HCloud 如何处理 Google 用户数据

访问。经您通过 Google 登录授权后，HCloud 访问：您的 Google Drive，且严格限定于应用自身创建的文件与文件夹（drive.file）；向您的 Google Photos 媒体库添加内容的能力（photoslibrary.appendonly）；以及列出其自身已上传到 Google Photos 的项目（photoslibrary.readonly.appcreateddata）。应用无法查看您 Drive 或 Photos 媒体库中的任何其他内容。

使用。上述权限仅用于一个目的：将您选择的内容上传到您自己的账户，并向您展示已上传的内容。Google 用户数据绝不用于广告、统计分析、用户画像或任何其他用途。

存储。我们不运营任何服务器，也不存储任何 Google 用户数据。手机上仅保存您的 OAuth 令牌，以及应用已上传内容的本地记录，二者均位于私有沙盒存储中。您的文件从设备直接传输至 Google，且仅存储在您自己的账户内。

分享。HCloud 绝不向任何第三方分享、转移、出售或披露 Google 用户数据。GBTechReviews 的任何人都无法读取您的数据，因为它从未到达我们这里。

保留与删除。当您在应用内断开 Google 连接或卸载应用时，令牌与本地记录会被删除。您也可随时在 myaccount.google.com/permissions 撤销授权。

HCloud 对通过 Google API 所获取信息的使用，遵守 《Google API 服务用户数据政策》，包括其中的“有限使用”（Limited Use）要求。

安全

我们如何保护您的数据

  • 设备与目的地之间的每一次传输均使用 HTTPS，绝不通过未加密连接发送任何数据。
  • 您的登录令牌与 WebDAV 凭据仅保存在应用私有的沙盒存储中，绝不会写入共享存储、记入日志，或发送至除对应服务之外的任何地方。
  • Google 登录采用带 PKCE 的 OAuth 2.0。HCloud 绝不查看、索取或存储您的 Google 密码。
  • 由于 HCloud 背后没有服务器，也就不存在可能被攻破的用户数据库。
  • 若发现安全问题，我们会及时修复并更新应用。欢迎通过下方邮箱反馈。
权限

应用申请的权限

  • 互联网——用于将您所选内容上传至您自己的账户或服务器。
  • 照片和视频访问（ohos.permission.READ_IMAGEVIDEO）——仅在您开启自动备份时使用，以便应用查找新增的照片和视频。读取这些内容仅为上传之用。
  • 保持后台运行——以便您离开应用或锁屏时，正在进行的备份能够完成。
  • 网络信息——仅用于可选的“仅在 Wi-Fi 下备份”设置，以检查您是否处于 Wi-Fi 网络。
  • 振动——应用内点按时的轻微触感反馈。
  • 通知（可选）——经您许可后显示本地通知，包括备份进度、备份完成，以及“那年今日”回忆提醒。这些通知均在您的设备上生成，不涉及任何服务器。
您的掌控

撤销授权与删除数据

您可随时在应用内断开 Google 连接，已存储的令牌会从设备中移除；也可随时在 myaccount.google.com/permissions 撤销授权。清除 WebDAV 信息即可移除相应凭据。卸载应用会移除所有本地存储的内容。已上传的项目会保留在您自己的账户或服务器中，由您自行管理，与您存放在那里的其他内容无异。

适用范围

儿童隐私

HCloud 并非面向 13 周岁以下（或您所在国家/地区规定的相应年龄）的儿童，也不会在明知的情况下收集他们的信息。

更新

本政策的变更

任何修订都会发布于本页面，并在页首标注新的日期。

如对本政策有任何疑问 huaweiproreview@gmail.com