Privacy policy

1. Who we are

StoreMore is provided by Basesys Global Private Limited, a company registered in India (CIN U62013PN2026PTC252859), Pune, Maharashtra (“StoreMore”, “we”, “us”). Under India’s Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described in this policy: we decide why and how it’s processed, and we’re responsible for it. For any privacy question or request, contact our Grievance Officer.

This policy covers the StoreMore website at storemore.ai, the StoreMore web app at app.storemore.ai (including when it’s installed on a phone or computer), and the StoreMore apps for iPhone, iPad and Android.

2. Personal data we process

Account data: your email address, sign-in method (passkey or email code), settings, and a profile photo if you add one.
Connected source data: the access you grant to services such as iPhone Photos, Google Drive or Dropbox, and information about the items in that scope (names, sizes, dates and types) so we can show and back them up.
Content you back up: copies of the photos, videos and files you choose to back up, and previews needed to display them.
Backup records: what was backed up, when, where it’s stored and its verification result.
Support communications: what you send us, and optional diagnostics you choose to attach.
Subscriber email: if you subscribe on this website to hear when StoreMore opens, your email address, the words you agreed to and when you subscribed.
Usage counts: anonymous daily totals, described in What we measure. They aren’t linked to you.
Analytics, only if you allow it: on this website and in the app, Google Analytics collects the pages and buttons you use, your browser and device type, and your approximate location, with a random ID kept in cookies. It never gets your files or anything that identifies you, and runs only after you choose Allow. See Google Analytics, only if you allow it.
Device data: device type, operating system and app version.

3. Why we process it

To provide StoreMore: back up the photos and files you choose, check every copy against the original, show them in one place, and delete them when you ask.
To run features you choose, such as duplicate detection and finding similar photos.
To secure accounts and prevent abuse.
To send the emails your account needs: sign-in codes, security alerts and backup results.
To remind you about your backups in the app and, if you turn them on, by email, such as when it’s time to back up again.
To answer support requests.
To email you when StoreMore opens, if you subscribed.
To improve reliability using the measurements described above.
To understand how people use this website, with Google Analytics if you allow it.
To meet legal obligations.

We don’t send promotional messages. We don’t sell your personal data, and we never use it, or your photos and files, for advertising or promotions.

We ask for your consent in clear, specific steps: when you subscribe to hear when StoreMore opens, when you create an account, and each time you connect a source or allow photo access on your phone (for the scope you choose). StoreMore only asks connected services for read-only access, so it can’t change, move or delete anything in them. Optional features, such as reminder emails, diagnostics attached to a support message and Google Analytics on this website, are off until you turn them on. Anonymous usage counts are on unless you switch them off, or your browser sends Global Privacy Control. They carry nothing that identifies you.

StoreMore AI isn’t available yet. Before it is, we’ll update this policy and ask for your consent.

You can withdraw consent at any time, as easily as you gave it, from Settings or by contacting us. Withdrawing doesn’t affect processing that already happened.

5. Children

StoreMore is for people 18 and over. Under India’s DPDP Act, 2023, anyone younger is a child, whose data can only be processed with a parent’s verifiable consent, so you confirm your age when you create an account. Children under 18 can use StoreMore only through a family account: a parent or lawful guardian confirms they’re an adult with DigiLocker, gives specific consent, and sets up the child’s account in Settings › Family. A child’s account has no tracking, behavioural monitoring, targeted advertising, usage counts or reminder emails. The parent sees how much space it uses, never its photos, and can withdraw consent at any time, which closes it and deletes its data. At 18 the account becomes the child’s own. If we learn that someone under 18 created an account without a parent, we’ll close it and delete its data.

We don’t track children’s behavior, monitor them for profiling, or show them targeted advertising.

People you share with: if you make a share link, anyone with the link (and the password, if you set one) can see the photos and files in it, and download them if you allow it, until it expires or you turn it off. They see your first name, never your email address.
Service providers who process data on our behalf under contract, and must protect it as this policy does, for hosting, storage, email delivery and website analytics: Amazon Web Services (hosting, the database, file storage and email delivery, all in India), Cloudflare (delivering and protecting this website) and, only if you allow it, Google (Google Analytics on this website).
Connected services, when you tell StoreMore to act in them, for example moving files to Dropbox.
Authorities, when the law requires it.
A successor business, if StoreMore is merged or sold. We’ll tell you before your data falls under a different policy.

7. Data from Google

If you connect Google Drive or Google Photos, StoreMore receives data from Google only to back up the items you choose. Access is read-only: StoreMore never edits, moves, deletes or shares anything in your Google account.

What we access: with Google Drive, the names, sizes, dates, types, image dimensions and folders of your Drive files, Google’s checksum for each file, previews of images while you browse, and the contents of the files and folders you choose to back up. With Google Photos, only the photos and videos you pick in Google’s own picker; StoreMore can’t see the rest of your library. With either, your Google account’s email address, to show which account is connected.
How we use it: to show your Drive inside StoreMore so you can choose what to back up, to copy the items you choose into your StoreMore storage, and to check every copy against Google’s original. Nothing else.
How we store and protect it: copies are stored in India, as described in Where it’s stored, and encrypted in transit (TLS) and at rest (AES-256). The keys that let StoreMore reach your Google account are encrypted (AES-256) and used only when you browse or back up.
How long we keep it: StoreMore doesn’t keep a list of your Drive or Photos library. It asks Google each time you browse, and previews are shown, not saved. The items you back up, with their names, sizes and dates, are kept until you delete them or close your account. Your Google account’s email address and StoreMore’s keys are deleted as soon as you disconnect or close your account.
Who we share it with: no one, except Amazon Web Services, which stores it for us under contract, people you choose to share items with yourself, and authorities when the law requires it.
What we never do with it: we don’t sell it, use it for advertising, or use it to train artificial intelligence or machine learning models. No one at StoreMore reads it unless you ask us to (for example in a support request), or to keep the service secure or comply with the law.
Disconnecting: choose Disconnect in Sources. StoreMore deletes its keys and asks Google to cancel its access straight away. You can also remove StoreMore at myaccount.google.com/connections. Copies you’ve already backed up stay in StoreMore, as your backup, until you delete them or close your account.

StoreMore’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Photos on your phone

The StoreMore apps for iPhone, iPad and Android ask your permission before they can see your photos and videos, and back up only what you choose.

What we access: if you allow access to your whole photo library, StoreMore can see all your photos and videos so it can back them up. If you allow only some photos, or pick them in your phone’s photo picker, it sees only those. Photos and videos you share to StoreMore from another app are treated the same way. StoreMore never changes, moves or deletes anything in your photo library.
How we use it: to back up the photos and videos you choose, check each copy against the original, and show them to you in StoreMore. Nothing else. We never use them, or anything learned from them, for marketing, advertising, data mining, profiling or training artificial intelligence.
Details inside your photos: photos and videos can contain details such as when and where they were taken and which camera took them. StoreMore keeps your files exactly as they are, so those details stay in your backup, but StoreMore doesn’t read or use them.
How we store, protect and share it: the same as everything else you back up: stored in India, encrypted, and shared only as described in Who we share it with.
No tracking: the StoreMore apps don’t track you across other companies’ apps or websites, show no advertising, and contain no third-party analytics or advertising code.
Your choices: change or withdraw photo access at any time in your phone’s settings (on iPhone, Settings › StoreMore › Photos; on Android, Settings › Apps › StoreMore › Permissions). Photos you’ve already backed up stay in StoreMore until you delete them or delete your account, which you can do in the app or on the web.

9. Where it’s stored

Your data is stored in India: on Amazon Web Services in Mumbai, with the second copy of every backed-up item in Hyderabad. It doesn’t leave India, with one exception: if you allow Google Analytics on this website, Google may process those analytics details outside India, as Section 16 of the Digital Personal Data Protection Act, 2023 permits. If anything else changes, we’ll update this policy first.

10. How long we keep it

Account data: while your account is open.
Backed-up content: until you delete it or close your account. Deleted items stay in Recently deleted for 30 days, so you can restore them, and are then removed from both copies.
Backup records: while your account is open, and deleted with it.
Share links: while your account is open. A link stops working as soon as it expires or you turn it off.
Usage counts: 13 months, then deleted automatically.
Google Analytics (only if you allow it): 2 months in Google Analytics, then deleted by Google. Its cookies expire after 13 months, or straight away when you switch it off.
Support messages: 1 year after you send them, then deleted automatically.
Subscriber emails: until we’ve emailed you that StoreMore is open, then deleted within 90 days. If StoreMore hasn’t opened within 2 years of when you subscribed, yours is deleted automatically anyway. You can ask us to remove yours sooner, from the contact page or by writing to our Grievance Officer.
Security logs (sign-ins and changes to your account): while your account is open, and for 1 year after you close it, as the DPDP Rules require; then deleted automatically.

When you withdraw consent or close your account, we delete your personal data unless the law requires us to keep it. Your files are removed from both storage copies straight away, and from our encrypted system backups within 30 days. The record of sign-ins and account changes is kept for 1 year, as the law requires, then deleted.

11. Security

We protect data with encryption in transit (TLS 1.2 or later) and at rest (AES-256 for your files in both copies, the database and its backups), access controls and monitoring. We verify backed-up copies before calling them protected, keep two copies of each in separate storage and re-check them regularly, and email you about new sign-ins. Trust & safety has the details. If a personal data breach affects you, we’ll tell you without delay: what happened, what it may mean for you, what we’re doing about it, and what you can do. We’ll report it to the Data Protection Board of India, with a full report within 72 hours, and to CERT-In within 6 hours of noticing it.

12. Your rights

You can ask us to:

Give you a summary of the personal data we process and who we’ve shared it with.
Correct, complete or update your personal data.
Erase your personal data.
Address a grievance about how we handle your data.
Nominate someone to exercise your rights if you die or become unable to: name up to two legacy contacts in Settings › Legacy contact. They can ask for a copy of your files or for your account to be closed at storemore.ai/legacy, and we check proof before acting.

Use Settings in the app, or make a privacy request. You can delete your account at any time in Settings, in the StoreMore app or on the web; Delete your account explains how, and what’s kept and for how long.

13. Grievance Officer

Sharmila, Grievance Officer, grievance@storemore.ai, Pune, Maharashtra. We acknowledge every grievance within 24 hours and respond within 15 days. If you’re not satisfied, you can complain to the Data Protection Board of India.

14. Changes to this policy

If we make meaningful changes, including any change to how StoreMore uses data from Google, we’ll tell you in the app or by email before they take effect, and explain what changed. The date at the top of this page shows when it was last updated.