Privacy policy

Data accessed and purpose

The app requests Google Drive access to files it creates or that the owner explicitly opens with it. It uses that access to upload encrypted backups, list backup objects and their metadata, verify stored data, and download objects for recovery. It may manage or remove its backup objects when the owner chooses to do so. It does not request access to Gmail, contacts or calendars.

Encryption and storage

Restic encrypts the selected files and their backup metadata on the owner’s device before upload. Google Drive stores the resulting encrypted repository. Google can still process account and storage information such as object sizes and upload times. OAuth credentials and the backup password are kept separately on devices controlled by the owner; they are not published on this website.

Use and sharing

Google account access and backup data are used only for the owner’s backup, verification and recovery workflow. The app does not sell this data, use it for advertising, or use it to train AI models. Data is transferred to Google Drive for storage and retrieved to owner-controlled devices for recovery.

Citadel Backup’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and control

Backup data remains in the owner’s Google Drive until the owner removes it or applies a retention policy. Revoking access stops future authorized operations; it does not automatically delete existing backups. The owner can revoke the app’s access through Google Account connections and delete backup data in Google Drive.

This information website

This website has no backup upload form and does not access visitors’ Google Drive accounts. The site code adds no analytics or advertising trackers. The hosting provider may process standard request information to deliver and secure the website.

Questions and changes

For questions about the app or its data handling, use the developer support email shown on the Google authorization screen. Updates to this policy will appear here with a revised effective date.