Skip to content

Privacy policy

Last updated October 24, 2026

What we collect when you use FyleUP, why, how long we keep it and the choices you have. We collect what the service needs to run, to count views fairly and to pay you, and we do not sell personal data.

Template text. A qualified lawyer must review this page, and fill in the highlighted details, before the service launches.

1.Who we are

FyleUP (“FyleUP”, “we”) runs the FyleUP website, publisher dashboard and app, and is responsible for the personal data described here. Our registered address is 1309 Coffeen Avenue STE 20934, Sheridan, Wyoming 82801, USA. [Company registration details and, where required, the contact details of our data protection officer and EU or UK representative].

2.What we collect

From creators

  • Account details: name, email address, password (stored only as a secure hash), country, time zone and two-step verification settings.
  • Your content: the files you upload, their names and descriptions, and details we derive from them, such as duration, thumbnails and streaming versions.
  • Payout details: the PayPal, bank, Airtm or UPI details you add, stored encrypted, and your withdrawal history.
  • Branding and support: your display name, logo and links, and the messages you send us.
  • Sign-in and security records: IP addresses, browser details and the times you sign in.

From viewers using the app

  • Device details: a random install identifier, the app and system version, the device model, and the result of the device check (Google Play Integrity on Android, App Attest on iPhone). No account is needed to watch.
  • View records: which link was opened, when, for how long, the IP address and the country it points to, and whether the view counted.
  • Ads: the app shows ads through Google AdMob. Where the law requires it, we ask for your consent before ads are personalised.

From people visiting the website

When someone opens a link in a browser, we record a visit (without the file) so creators can see how many visits turn into app opens. We use the IP address to avoid counting the same visitor twice.

3.How we use it

  • to run the service: store and stream your files, show your links and your dashboard;
  • to count views, check them for fraud and calculate earnings;
  • to pay you and keep the financial records the law requires;
  • to keep accounts and the service secure, and to enforce our terms and content policy;
  • to answer your messages and send you service emails, such as withdrawal updates and security alerts;
  • to understand and improve how the service is used.

5.Who we share it with

We do not sell personal data. We share it only with:

  • service providers who host and deliver the service for us, such as cloud hosting and storage, email delivery and malware scanning, under contracts that limit their use of the data;
  • payment providers and banks, to send your withdrawals;
  • Google, for device checks on Android and for ads in the app, and Apple, for device checks on iPhone;
  • authorities, when the law requires it or to protect people from harm;
  • a buyer or successor, if our business is sold or merged, under the same protections.

The people you share links with see your display name, branding and the titles of the files you share.

6.Cookies and similar storage

  • Session cookie (lm_session): keeps you signed in. Essential.
  • Referral cookie (lm_ref): remembers, for 30 days, which creator invited you, so the referral is credited when you sign up.
  • Preferences: your theme choice, stored in your browser.

7.How long we keep it

  • Account and content data: while your account is open, and deleted when you or we close it.
  • Deleted files: removed from storage within 7 days of deletion.
  • IP addresses recorded with views: 90 days, for fraud prevention.
  • Financial and tax records: as long as the law requires, typically several years.
  • Security and audit logs: as long as needed to protect the service, then deleted.

8.How we protect it

Data travels over encrypted connections. Files are kept in private storage and only delivered to the app through addresses that expire within minutes. Passwords are hashed, payout details and two-step verification secrets are encrypted, and staff access is limited and logged. No system is perfectly secure, so we also ask you to use a strong password and two-step verification.

9.Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent. You can update most details in your dashboard; for anything else, including deleting your account, email [email protected]. You can also complain to your local data protection authority.

Residents of California have the right to know what we collect and to delete it, and the right not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioural advertising outside the consent you give in the app.

10.Children

The service is not meant for children under 13, or under 16 where that is the local age of consent for digital services. Creator accounts are for adults only. If you believe a child has given us personal data, contact us and we will delete it.

11.International transfers

Our providers may process data in other countries. When data leaves the EEA, the UK or another region with transfer rules, we use the safeguards those rules require, such as [transfer mechanism, for example standard contractual clauses].

12.Changes to this policy

We will post any change here and update the date at the top. If a change matters, we will tell you by email or in the dashboard before it takes effect.

13.Contact

Privacy questions and requests: [email protected]. See also our terms of service.