WordPress WPtouch Pro version 4 appears to leave backups in a world accessible directory under the document root.