OneStop privacy policy

Greenlyz, LLC · Last updated November 13, 2026

This notice covers OneStop Photos (formerly OneStop Camera Backup, package privatecloud.onestop.camera), Documents, Spreadsheets, Files, Tasks, Calendar, Mail, Contacts, Music, Video, and Admin (packages com.greenlyz.onestop.documents, .spreadsheets, .files, .tasks, .calendar, .mail, .contacts, .music, .video, and com.greenlyz.onestop.admin). Privacy contact: [email protected].

Your server and account

OneStop connects to the OneStop server you choose. It does not automatically create a Greenlyz-hosted storage account. The server operator controls accounts, access, storage, sharing, retention and backups. Use a server and administrator you trust. A server operator may provide an additional privacy notice for its own practices.

Your server address and sign-in information are used to authenticate with that server over HTTPS. The Android apps store connection and session information using encryption backed by Android Keystore. Biometric app unlocking uses Android's authentication facilities; OneStop does not receive a fingerprint or face template. Server administrators create ordinary user accounts; the apps do not provide public self-registration.

The server and its network providers can see connection IP addresses. The server maintains account, session, device authorization and security/activity records as needed to operate and protect the service. Greenlyz does not automatically receive your content or credentials merely because you install an app. Greenlyz can receive information you voluntarily send to support, or information processed by a server Greenlyz separately operates for you.

Information used by each app

Photos: Your selected photos and videos, album information, edits, filenames, metadata and upload/backup records are processed on your device and selected server. Camera and microphone permission support taking photos and recording videos. Location permission supports optional capture-location features. Original media may contain location coordinates, capture time and recorded audio; these can be transferred with the file. Photo/media permissions enable browsing, selected-media access and backup, including background backup where enabled. Android controls background scheduling, permission scope and battery restrictions. Background operation is not guaranteed to be immediate.

Documents, Spreadsheets and Files: Documents, workbook contents, formulas, files, folders, names, revisions and sharing choices are sent to and stored on your selected server. Files selected through Android's file picker can be imported; exports you choose are written to your selected destination. Printing sends document content through the print service you select. Offline drafts and temporary files may be kept on your device.

Tasks and Calendar: Task text, due dates, completion status, event titles, times, descriptions, locations, organizer and attendee information, invitations and related contacts are processed to provide your task list, calendar and reminders. If you connect an external calendar, its provider receives requests needed to synchronize it. Sending invitations or replies sends information to the selected participants through the configured account. Notification and alarm permissions support reminders; notification previews may appear on the lock screen according to Android settings.

Mail: Connected email account settings and authorization, message headers, senders, recipients, message bodies, attachments, folder state and drafts are processed on your server and device to retrieve, display, search and send mail. Email providers and recipients receive information necessary for those operations. Remote images and links can contact external hosts when allowed/opened, directly or through your server, and may reveal a connection IP address or trigger the sender's tracking. Image and link settings control these features. Mail notifications may reveal message information according to your notification settings.

Contacts: Names, email addresses, phone numbers, companies, addresses, notes and contact photos are processed on your server and device. Device contacts permission supports importing phone contacts when you choose. Connected-account imports request contact information from the selected provider. Camera permission supports contact-related capture features. Linking a contact to an event or task stores the association on your server.

Music and Video: Your selected server supplies media files and metadata for browsing and playback. Library information, playback position, favorites and related preferences are processed as needed for these features. Music can continue using Android's media-playback service and expose playback controls or library information to a connected Android Auto interface. Downloaded, cached or exported media can remain on the device until removed.

OneStop Admin and server monitoring

OneStop Admin connects to your selected server using an existing administrator account. It displays account identifiers and display names, recent actions and media-item names where available, timestamps, connection IP addresses and device/browser descriptions, transfer amounts, server CPU and memory measurements, supported process and network-interface information, and remote bandwidth limits. Ordinary user accounts cannot open the administrator monitor or change these limits.

The selected server records usage for operating, reviewing and protecting that server. Load and transfer history is retained there for up to 30 days. Detailed activity snapshots have a separate limit of 90 days or 20,000 entries. Source addresses and device details in activity snapshots are encrypted at rest. These snapshots exclude account passwords, session tokens, email message contents and URL query strings. Other account and security records follow the retention practices described in this notice and the server operator's own policies.

Administrators can download recorded usage to their device. Exported logs and independent backups may remain until their owner deletes them. Keep these files private because they can identify users, devices and activity. Installing OneStop Admin does not automatically send the monitored server's logs to Greenlyz.

Optional personal Wi-Fi matching: the Android apps can remember the current Wi-Fi name on the device to choose between the server's local and external connections. Android may require Location permission and its Location setting to read that Wi-Fi name. The name stays on the device; this feature does not request your Wi-Fi password or GPS coordinates. You can forget the saved Wi-Fi in app settings.

Media lookups and optional people grouping

Music can automatically look up missing album information and artwork. The selected server sends song titles, artist names and, when available, album names to MusicBrainz, and requests artwork using release identifiers from Cover Art Archive and Internet Archive. These lookups can use tags or names derived from uploaded filenames. The providers receive the server's connection IP address and the lookup information; OneStop does not send the audio file or your OneStop sign-in credentials to these artwork providers.

Video metadata searches and matching can contact TVmaze, The Movie Database (TMDB), or TheTVDB, depending on server configuration and your selected feature. Lookup information can include a title derived from a filename, media type, and season or episode identifiers. Scheduled automatic matching is off until enabled. The server downloads descriptions and artwork from the selected provider; the video itself is not uploaded to these metadata providers. Provider credentials configured by the administrator, or a provider PIN supplied by you where required, are used to authenticate the relevant provider requests.

Photos offers optional people grouping, which is off by default. When enabled, your selected server analyzes faces in uploaded photos and stores face locations, numerical face descriptors, group assignments, and names or labels you provide to help organize and find photos. This processing uses models on your server, not an external face-recognition service. Face descriptors and people labels may be sensitive personal information and are distinct from Android biometric app unlocking. Only enable this feature for photos you are authorized to process. Your server operator controls its stored data and backups; contact that operator about deletion of photos, face descriptors and people labels.

Purposes and recipients

Information is used to authenticate accounts, provide the features you request, synchronize content, display notifications, complete transfers, maintain preferences, protect accounts and content, and respond to support requests. Your selected server and the providers it uses receive information necessary to provide those services. Sharing a file, sending mail or invitations, connecting an account, opening a link, printing, or exporting to another app can disclose information to the destination you select. Recipients can retain copies independently.

The current OneStop apps do not include advertising SDKs, third-party analytics SDKs, or automatic crash-reporting to Greenlyz. Greenlyz does not sell your content or use it for targeted advertising or model training. Local diagnostic records are not automatically submitted to Greenlyz. This does not describe independent practices of a server operator or external provider you choose.

Support email, helpdesk submissions and feedback include the contact information, text, logs and attachments you choose to provide. Greenlyz and its email/helpdesk providers process that information to handle your request. Review logs and attachments first; do not send passwords, session tokens, recovery keys or unrelated private content. Optional external payment services process payment details under their own notices; OneStop tips do not buy extra app features.

Security and storage

Android app connections to your server require HTTPS with a certificate trusted by the device. OneStop encrypts stored file contents with server-managed keys. This is not end-to-end encryption: an operator with the server keys can decrypt content. Account data, filenames and other metadata can remain readable in the server database. Android app isolation and device security protect other local caches and downloaded files; not every temporary or exported file is separately encrypted by OneStop.

Storage location depends on the server and providers you choose. Selecting an overseas server or contacting a provider abroad can transfer information outside your country. Protect your device and server, restrict access, maintain backups and keep software updated. No system guarantees security in every circumstance.

Retention and deletion

Your server operator controls how long content, accounts, logs, trash, previous versions and independent backups remain. Deleting an item or moving it to Trash may not immediately erase all copies. Disconnecting an external account does not delete data already held by that provider. Revoking an app or device connection prevents future authorized access but does not recall earlier downloads or deliveries.

You can withdraw Android permissions, stop backup/notifications, sign out or disconnect accounts, and clear app storage or uninstall to remove remaining local app data. Files exported outside the app must be removed separately. Removing local data does not delete server copies.

For access, correction, export or deletion of a self-hosted account or its content, contact the administrator of the server address you entered. Ask about deletion of the account, active content, trash, versions, device authorizations and backups. The administrator may need to verify your identity and explain required retention. Greenlyz cannot directly erase data from an independently operated server.

For information sent to Greenlyz support, or help identifying the appropriate operator, email [email protected] with the subject OneStop privacy request. Supply only what is necessary to locate the request; do not send secrets or private media as proof. Greenlyz keeps support records as needed to handle requests and meet applicable obligations. Necessary retention will be explained when responding to a deletion request.

Other people's information and younger users

The apps are intended for users aged 13 and older, including personal and workplace use, and are not directed to children under 13. Only upload, import or share other people's information when authorized. A parent or guardian with a concern should contact the responsible server operator, or Greenlyz for information submitted to Greenlyz support. Server operators are responsible for their own audience requirements and appropriate permissions.

Depending on location, applicable law may provide rights to access, correct, delete or obtain a copy of information, restrict or object to processing, withdraw consent, or contact a privacy regulator. Direct requests to the organization controlling that information. Android permission controls are separate from legal consent and retention obligations.

Changes and contact

Updates to this notice will appear with a revised date. Where required, material changes will be accompanied by additional notice or consent before taking effect.

Greenlyz, LLC — [email protected]

Contact Greenlyz about privacy