Privacy Policy

Last updated October 26, 2026. Supa Transfer is made by Aura Scale Software. Questions: hello@supatransfer.app.

Your files

Files travel straight between the two devices, end-to-end encrypted. They never pass through our servers. When two networks block a direct connection and the receiver allows it, a relay carries the encrypted data; it can't read it. We never see file names, file contents or tickets.

What we keep

• Your account: your email address (from Google, or the address we emailed a code to), when you joined, and your plan.
• Sign-ins: a scrambled copy (hash) of each sign-in token, so we can recognise your browser and devices. A sign-in from an app also shows its kind and rough location (city and country, from its IP address) on the page that approves it, until the sign-in is finished.
• Shares: for each file or folder you share, a fingerprint of it (a hash that reveals neither names nor contents), its total size and when you shared it. We use them to count your monthly allowance, and receiving apps ask us whether a share was counted. We keep them for the current and previous month.
• Downloads: for each share you receive, the same fingerprint, its size and when you started it, to count your monthly receiving. We keep them for the current and previous month.
• Payments: Polar sells Pro on the website, Apple in the iPhone and iPad app, and Google in the Android app, and each keeps your billing details. We only get your subscription's id, its status and when the time paid for ends. We never see your card.
• Request logs: our host keeps short-lived logs of requests (IP address, time, page asked for) to run and protect the service.

Who helps us

Cloudflare hosts the site and its database, Resend sends sign-in emails, Google or Apple signs you in if you choose it, and Polar, Apple and Google handle payments. Each gets only what its job needs. We don't sell your data, show ads, or use analytics trackers. The only cookies are the one that keeps you signed in and a short-lived one during Google sign-in.

Deleting your account

Delete your account from your account page or in the phone apps. That deletes your account, its sign-ins, share and download records, and ends Pro bought on the website at once. We only keep how much it sent and received this month, under a scrambled copy (hash) of its email address and Apple ID, until the month ends, so deleting an account and signing up again doesn't start the free allowance over. Pro bought in a phone app goes on renewing until you cancel it in that store. Polar, Apple and Google keep their billing records as the law requires.

Children

Supa Transfer isn't meant for children under 13, and we don't knowingly keep their data.

Changes

If this policy changes, we'll update this page and its date. For a big change, we'll email account holders.