Privacy Policy
SendMate is a peer-to-peer (P2P) file-transfer app, built privacy-first: your files are sent directly between devices and are end-to-end encrypted. This policy explains exactly what does and does not happen to your data.
The short version
- Your files never reach our servers. They travel device-to-device, encrypted end-to-end (X25519 → AES-256-GCM). We cannot read them.
- No account, no sign-in. Pairing uses a temporary 6-digit code.
- We collect a small amount of anonymous diagnostics and (optionally) usage analytics — never the contents, names, or keys of your files.
What we never collect or see
- The contents of your files.
- File names or file keys/passwords.
- Your transfer history is stored only on your device (you can clear it any time).
What our servers temporarily handle
To connect two devices ("signaling"), our server briefly handles the 6-digit room code, non-content transfer metadata (file count, total size, MIME types, platform), and temporary network connection info (ICE candidates / SDP) needed to establish the direct link. This is kept only for the few minutes a pairing is active, then expires. When two devices are on different networks and a direct link can't be made, encrypted data may be relayed through a TURN server (Cloudflare Realtime); the relay forwards only already-encrypted packets and does not store them.
Diagnostics & analytics
- Crash reporting (Sentry): if the app crashes, we receive a diagnostic report (error details, device model, OS version, app version) to fix bugs. It does not include personal information or any file data.
- Usage analytics (PostHog): anonymous, aggregate usage events and basic device/OS info, to understand how the app is used. No personal identifiers, no file data. You can turn this off in Settings → Anonymous usage data.
Advertising
SendMate shows ads via Google AdMob. To serve ads, Google may collect and process device identifiers and usage data as described in Google's policies:
In supported regions you will be asked for ad-personalization consent. You can also limit ad tracking through your device settings (iOS: Allow Apps to Request to Track; Android: Reset/Delete advertising ID).
Data retention
- Files: not stored by us (P2P).
- Signaling/room metadata: minutes (auto-expires).
- Crash/analytics: per Sentry/PostHog defaults; aggregate and anonymous.
Children
SendMate is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children.
Your choices
- Turn off analytics any time in Settings.
- Manage ad tracking via your device settings.
- Clear your on-device transfer history any time.
Changes
We may update this policy; we'll post the new version with a new effective date.
Contact
Questions? Email [email protected].
SendMate