🔴 1️⃣ They collect more data than seems strictly necessary
- Why it’s a red flag:
They collect device ID and IP address, which together can uniquely track a user across networks and devices — beyond what you'd expect for a file manager or productivity app.
🔴 2️⃣ Vague data usage explanation
- Why it’s a red flag:
They don’t define "QSpace functions" — it’s too broad.
What exactly are those functions? Updates? Analytics? Error reporting? Marketing?
A policy should explicitly describe specific uses.
🔴 3️⃣ No clear retention policy
- Why it’s a red flag:
They don’t say how long they keep your data.
A responsible policy explains if data is kept permanently, only while the account is active, or a specific number of years.
🔴 4️⃣ No mention of security measures
- Why it’s a red flag:
No mention of data encryption, secure storage practices, or compliance with security standards (GDPR, CCPA, etc.).
They just leave you guessing if they’re protecting your data or not.
🔴 5️⃣ Overly broad update clause
- Why it’s a red flag:
They can change the policy without requiring you to accept or even properly review it.
Also, "receive notifications" is vague — will it be a popup? An email? A subtle mention you might not see?
🔴 6️⃣ Lack of opt-out or control options
- Why it’s a red flag:
There’s no mention of allowing you to access, correct, or delete your data.
No opt-out of specific data collection (e.g., telemetry or analytics).
Modern privacy standards almost always include these rights.
🔴 7️⃣ They mention PayPal data but no security details
- Why it’s a red flag:
They mention collecting sensitive payment data, but they don’t clarify how it is secured or whether they store it or just pass it to PayPal.
Payment data needs strong security guarantees.
🔴 8️⃣ Mysterious "Others" section
- Why it’s a red flag:
It’s left hanging without context.
Do they integrate with Google Drive? Do they sync your files? Do they collect Google Drive metadata?
There’s no explanation of what data is transferred, stored, or accessed.
In short:
✅ The policy is super minimal — too simple for the amount of data they collect.
✅ It uses broad terms and lacks details on usage, sharing, security, and retention.
✅ It doesn’t give you any real control.
✅ It opens the door to future changes without meaningful consent.