Privacy Policy

Last updated: August 29, 2026

SendMyFile is a secure file transfer service. Files are encrypted on your device before upload, stored temporarily as encrypted chunks, and decrypted only by receivers who have the 9-digit code.

1. Data we collect

SendMyFile does not require an account. We do not collect your name, email, or any personal identifier from you directly.

When you start a transfer, we process transfer identifiers, quota signals, encrypted metadata, encrypted chunks, file size, chunk count, expiry time, and the wrapped key envelope your 9-digit code opens.

If you subscribe via Lemon Squeezy, the license key you enter is stored locally in your browser and sent to our relay for validation with Lemon Squeezy. We store a short-lived signed premium cookie after validation.

2. Data we do not collect

  • We do not receive the decryption key for your transfer.
  • We do not see plaintext file contents or plaintext file names.
  • We do temporarily store encrypted chunks so receivers can download them within the expiry window.
  • We do not store, transmit, or have access to passwords for any of your other services.
  • We do not require sign-in and do not maintain user accounts.

3. How the connection works

SendMyFile encrypts file metadata and chunks in your browser or app before upload. Our server stores the encrypted chunks temporarily and serves them back to the receiver over HTTPS. The decryption key is only ever stored wrapped inside an envelope that your 9-digit code unlocks; the code itself is never sent to our server.

4. Third-party services

  • Hetzner — hosts our relay and temporary encrypted transfer storage.
  • Lemon Squeezy — payment processor for premium subscriptions. We do not receive your payment details. Subject to Lemon Squeezy's privacy policy.
  • Google AdMob (mobile app only) — serves banner ads to free users of the Android app. Premium removes them. Subject to Google's privacy policy.
  • Google AdSense (this website) — serves ads on sendmyfile.app. Google and its partners may set cookies or read device identifiers to measure and personalise ads. In regions where consent is required you are asked first, and you can change your choice at any time. Subject to Google's privacy policy. Your files are never shared with advertisers — they are encrypted before upload and we cannot read them.

5. Data retention

Transfer data is temporary. Encrypted chunks and their metadata expire automatically, currently after 72 hours on the free plan and 7 days with Premium, unless a different period is shown in the product.

6. Your rights

Because we do not maintain accounts, there is no profile to delete. Locally stored data (license key, device id, local send counters) can be cleared by removing site data in your browser. For subscription-related questions, contact us at hello@zalordigital.com.

7. Children

SendMyFile is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has used the service, please contact us so we can remove the data.

8. Changes to this policy

If this policy materially changes, we will update the date at the top of this page and, where appropriate, notify users inside the app.

9. Contact

Questions about this policy or your data? Email hello@zalordigital.com.