Privacy.

The short version

The RelayPony app has no server, no account, no telemetry, no analytics, and no advertising. Files travel directly between two phones and are never uploaded anywhere. The single place any personal data exists is the waitlist form on this website: if you submit your email there, it is stored so you can be notified or added to the closed test. That's it.

What the app collects

Nothing. There is no RelayPony server, so there is no account creation, no sign-in, and no data gathering. There are no analytics SDKs, advertising SDKs, or third-party crash reporters in the app. We do not know who uses RelayPony, how often, or what files you send, because that information never leaves your devices and is never sent to anyone.

When you send a file, it goes directly from your phone to the other phone, encrypted with the age protocol. It is not relayed through, queued on, or cached by any machine in between.

What stays on your device

• Your device's identity key is held in the Android Keystore, hardware-backed where supported, and never transmitted.
• Paired devices (the trust-on-first-use record from scanning a QR code) are stored locally so they're recognized for later transfers.
• Received files land in the app's Inbox and, if you enable it, save to your Downloads folder. They live on your device, not on any server.

The website waitlist

This is the one place RelayPony collects personal data, and only because you typed it in. When you submit the form on this site, the following is stored in a database on the RelayPony server:

• The email address you entered.
• Your selected platform (Android or iOS) and intent (join the closed test, or notify at launch).
• Standard request metadata your browser sends with any form: your IP address and user-agent string, plus the time of submission. These are kept to deter abuse of the form.

That data is used only to: send you a confirmation email; let the developer know someone signed up; and, if you chose the closed test, add you as a tester and send you the Google Play join information. It is not sold, shared, or used for anything else. There is no newsletter and no advertising. The confirmation email is sent through a self-hosted mail server (no third-party email marketing service).

If you join the closed test, your participation as a Google Play tester is also processed by Google under Google's own terms and privacy policy, because the test is distributed through Google Play.

To be removed: email NorseHorse@norsehor.se and your address is deleted from the waitlist. Entries are kept only until launch or until you ask to be removed.

The website itself

This site sets no cookies and runs no analytics or trackers. Fonts are self-hosted, so no third-party font service sees your visit. There is no CDN in front of the site. Your visit is not profiled.

Permissions the app requests

• Camera: used only to scan a pairing QR code. The camera feed is read in-process and is not saved, transmitted, or shared.
• Nearby Wi-Fi / local network: used only to discover and connect to the other phone for a transfer.
• Storage: touched only to read the files you choose to send and to save received files to Downloads.

Third-party services

The app uses none. The website uses a self-hosted mail server to send the waitlist confirmation, and, if you opt into the closed test, Google Play to distribute the tester build. That is the entire list.

Children's privacy

RelayPony is for general audiences. The app collects no data from anyone, including children. There are no in-app purchases, no advertising, and no user-generated content visible to other users.

Changes to this policy

If this policy changes materially, the "Last updated" date above will change with it.

Contact

Questions about privacy or this policy: NorseHorse@norsehor.se. To encrypt your message, use the OpenPGP public key.