Privacy.

The short version

The RelayPony app has no server, no account, no telemetry, no analytics, and no advertising. Files travel directly between two phones and are never uploaded anywhere. Before launch, the website offered an email waitlist for early access; now that RelayPony is public on both the App Store and Google Play, that form has been retired. What it collected while it ran is described below. That's it.

What the app collects

Nothing. There is no RelayPony server, so there is no account creation, no sign-in, and no data gathering. There are no analytics SDKs, advertising SDKs, or third-party crash reporters in the app. We do not know who uses RelayPony, how often, or what files you send, because that information never leaves your devices and is never sent to anyone.

When you send a file, it goes directly from your phone to the other phone, encrypted with the age protocol. It is not relayed through, queued on, or cached by any machine in between.

What stays on your device

• Your device's identity key is held in the phone's secure keystore, hardware-backed where supported, and never transmitted.
• Paired devices (the trust-on-first-use record from scanning a QR code) are stored locally so they're recognized for later transfers.
• Received files land in the app's Inbox and, if you enable it, save to your Downloads folder. They live on your device, not on any server.

The website waitlist (retired)

Before RelayPony launched, this site offered an email waitlist for early access. That form has been removed now that both apps are public. While it was running, submitting it stored the following in a database on the RelayPony server:

• The email address you entered.
• Your selected platform and intent (join the Android closed test, or notify at launch).
• Standard request metadata your browser sends with any form: your IP address and user-agent string, plus the time of submission. These were kept to deter abuse of the form.

That data was used only to: send a confirmation email; let the developer know someone signed up; and, for closed-test requests, add the tester and send the Google Play join information. It was never sold, shared, or used for anything else, and there was no newsletter and no advertising. Any addresses still held from the waitlist are being cleared out and are not used for any other purpose.

If you took part in the Android closed test, your participation as a Google Play tester was also processed by Google under Google's own terms and privacy policy, because the test was distributed through Google Play. If you download either app now, the App Store or Google Play download itself is processed by Apple or Google under their own terms and privacy policies; RelayPony receives nothing from it.

To be removed: if you ever joined the waitlist and want your address deleted, email NorseHorse@norsehor.se and it is removed.

The website itself

This site sets no cookies and runs no analytics or trackers. Fonts are self-hosted, so no third-party font service sees your visit. There is no CDN in front of the site. Your visit is not profiled.

Permissions the app requests

• Camera: used only to scan a pairing QR code. The camera feed is read in-process and is not saved, transmitted, or shared.
• Nearby Wi-Fi / local network: used only to discover and connect to the other phone for a transfer.
• Storage: touched only to read the files you choose to send and to save received files to Downloads.

Third-party services

The app uses none. The website uses a self-hosted mail server for the occasional email it sends (there is no third-party email marketing service). The apps themselves are distributed through Apple's App Store and Google Play, each governed by its own terms. That is the entire list.

Children's privacy

RelayPony is for general audiences. The app collects no data from anyone, including children. There are no in-app purchases, no advertising, and no user-generated content visible to other users.

Changes to this policy

If this policy changes materially, the "Last updated" date above will change with it.

Contact

Questions about privacy or this policy: NorseHorse@norsehor.se. To encrypt your message, use the OpenPGP public key.