LegalPrivacy policy

Privacy policy

What we collect when you use OCA Drive, why we collect it, who it is shared with, how long we keep it and how you stay in control.

Last updated 26 October 2026

01Who we are

OCA Drive is a cloud storage and sync service operated by OneClickApps, referred to here as “we” or “us”. This policy covers the OCA Drive website, the web app, the desktop apps for macOS, Windows and Linux, and the mobile apps for Android, iPhone and iPad.

When you use OCA Drive as a member of an organization run by your employer or another administrator, that organization decides how the files and records in it are used, and we process them on its behalf. Questions about that data can also go to your organization's administrator.

02Information about your account and devices

To create and protect your account we collect:

  • Your name, email address and password. Passwords are stored only as a one-way hash, never in readable form.
  • If you sign in with Google or Facebook, the account identifier, name and, when you allow it, email address that they share with us. We never receive your Google or Facebook password.
  • Your organization, your membership and role in it, and the invitations you send or receive.
  • Account and device identifiers, the device name, the platform (for example Android, iOS or Windows) and the app version.
  • Sign-in history with IP address and network information, used to keep your account secure and to show you where you are signed in.

03Your files and activity

To provide the service we store and process:

  • The files, folders, photos and videos you upload, including those uploaded by the optional camera backup in the mobile apps.
  • Earlier versions of your files, items in Trash, the shares and links you create, and comments.
  • Activity and audit logs of actions in your drive and organization, such as uploads, shares, downloads and sign-ins.
  • Search queries and the information needed to search your files.

Photos and videos can contain location metadata recorded by your camera. Camera backup has a “Remove location” option, which is off by default; when you turn it on, location metadata is removed from backed-up photos.

We use your content only to provide OCA Drive to you: to store, sync, share, preview, search and protect it.

04What the apps access on your device

The mobile apps access the files, photos and videos you choose to upload, and your photo library when you turn on camera backup. They can ask for permission to show notifications. They do not access your contacts, your calendar, your microphone or your camera.

05How we use your information

  • To run OCA Drive: storing, syncing and sharing your files across your devices.
  • To keep accounts and files secure, including sign-in protection and scanning uploads for malware.
  • To send you email, such as verification codes and the notifications you choose to receive, and push notifications to your devices.
  • To manage your plan and subscription with our payment provider.
  • To answer your support requests.
  • To find and fix crashes and errors, and to measure app performance.
  • To understand how the apps are used so we can improve them, using usage statistics that are not linked to your name or email address.
  • To meet our legal obligations.

We do not sell your personal data and we do not share it for advertising. Our apps contain no advertising or attribution SDKs, and we do not collect your advertising ID.

06File processing on our own servers

Malware scanning, previews and thumbnails, document conversion and Office editing all run on servers we operate. Your files are not sent to outside services for this processing.

07Who receives your information

  • Payment providers. Paid plans are bought on the web, not inside the mobile apps. Payments are handled by Paddle, which acts as merchant of record and sells the subscription to you, or by Stripe. The provider receives your name, email address and billing details. We never receive or store your card number. Their own privacy policies apply to the data they handle.
  • Push notification services. To deliver notifications, your device's push token is sent to Google Firebase Cloud Messaging on Android and to Apple Push Notification service on iPhone and iPad, together with the notification itself, which contains identifiers, your organization's name and a short sentence describing what happened.
  • Sign-in providers. When you choose to sign in with Google or Facebook, they learn that you signed in to OCA Drive, under their own privacy policies. You can disconnect them in Settings at any time.
  • Email. Verification codes and notification emails are sent through our own email relay.
  • Crash reports. Crashes in the Android app are reported to Google Firebase Crashlytics. Errors in the web, desktop and iPhone and iPad apps go to an error tracker that we host ourselves, which removes access tokens, email addresses, IP addresses and URL query strings before storing them.
  • Analytics and performance. The Android app and the web app send usage events (such as which screens are opened), device and app version information and performance measurements to Google Analytics for Firebase and Firebase Performance Monitoring. These events do not include your files, file names, name or email address. Advertising features are off.
  • Session recordings on the web. The web app uses Microsoft Clarity to understand how pages are used. All text and content on the page is masked before it leaves your browser, so recordings do not show your files, file names or account details.
  • People you share with. When you share a file, folder or link, the people you share with can see that content and your name.
  • Your organization. Administrators of an organization you belong to can manage your membership and see the organization's activity and audit logs.
  • Authorities, when the law requires us to disclose information.

08How we protect your information

  • All connections to OCA Drive use TLS (HTTPS) with HSTS.
  • You can protect your account with two-factor authentication and passkeys.
  • You can see the devices signed in to your account, sign any of them out, and use remote wipe on plans that include it.
  • Our backups are encrypted.

No system is perfectly secure. If you believe your account has been compromised, change your password and contact us.

09How long we keep your information

  • We keep your account and files while your account is active.
  • Trash keeps deleted files for 30 days on the Free plan and for longer on paid plans, as shown on the pricing page. After that they are permanently deleted.
  • Earlier versions of files are kept for the period included in your plan.
  • When you delete your account, access is revoked immediately and your data is permanently deleted after a 30-day grace period. Exceptions are data under a legal hold set by your organization, and records we must keep by law, such as invoices.
  • In team and business organizations, the organization's administrators control the organization's data, including what is kept and what is deleted.

10Your rights and choices

  • Access and export: you can see and download your files at any time, and ask us for a copy of the personal data we hold about you.
  • Correction: you can change your name and email address in your account settings, or ask us to correct other data.
  • Deletion: you can delete your account in the app or on the web, as described on the Delete your account page.
  • Notifications: you can choose which emails and notifications you receive, and turn off push notifications in your device settings.

To use any of these rights, contact us at the address below. If your account belongs to an organization, some requests may need its administrator. You may also have the right to complain to the data protection authority where you live.

11Children

OCA Drive is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.

12Changes to this policy

When we change this policy we update the date at the top of this page. If a change is significant, we will also tell you by email or in the app before it takes effect.

13Contact us

For any question about this policy or your personal data, write to us. OneClickApps, Egypt.