BIShare (“we,” “our,” or “us”) operates the BIShare mobile applications (iOS and Android), the desktop application (Windows and macOS), and the website located at bishare.app (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
1. Information We Collect
1.1 Information You Provide
- Files You Share Remotely. When you use our remote transfer features (a share link, QR code, 6-character code, or a room), your files are stored temporarily on our relay and automatically deleted after 24 hours. We do not access, view, scan, or analyze the content of your files.
1.2 Information Collected Automatically
- Device Information. We collect device type, operating system version, app version, and language preference for analytics and compatibility purposes.
- Usage Data. We collect anonymous, aggregated statistics about platform distribution, country (via IP geolocation), and connection type. This data cannot identify individual users.
- IP Address. We temporarily log IP addresses for rate limiting and abuse prevention. IP addresses are not stored permanently or associated with your identity.
1.3 Information We Do NOT Collect
- Local Transfers. Files transferred between devices on the same local network (LAN) are sent directly peer-to-peer. These transfers never pass through our servers, and we have no access to or knowledge of them.
- Clipboard Content. Clipboard synchronization operates entirely over your local network via UDP broadcast. Clipboard data never reaches our servers.
- File Content. We do not scan, analyze, index, or view the content of any files you share through our Service.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide the Service. Facilitating file transfers, generating share links and transfer codes, and enabling rooms for group transfers.
- To Improve the Service. Analyzing anonymous usage patterns to improve performance, fix bugs, and develop new features.
- To Ensure Security. Detecting and preventing abuse, enforcing rate limits, and protecting against unauthorized access.
- To Communicate. Sending essential service notifications when necessary. We do not send marketing emails.
3. Data Storage and Security
3.1 Encryption
All file transfers support end-to-end encryption using industry-standard AES-256-GCM encryption with Curve25519 key exchange. When encryption is enabled, only the sender and recipient can access the file content — our servers cannot decrypt it. All connections to our servers use TLS (HTTPS) encryption in transit.
3.2 Infrastructure
Our servers are hosted in secure, SOC 2-compliant data centers. File storage uses encrypted-at-rest cloud infrastructure with automatic redundancy. Access to production systems is restricted to authorized personnel with multi-factor authentication.
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Remote transfer files | Automatically deleted after 24 hours |
| One-time transfer files | Deleted immediately after first download |
| IP-based rate limit logs | 1 hour (rolling window) |
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- Service Providers. We use trusted third-party infrastructure providers for hosting, file storage, and content delivery. These providers process data on our behalf and are contractually obligated to protect it.
- Legal Requirements. We may disclose information if required by law, subpoena, or court order, or if necessary to protect the rights, property, or safety of BIShare, our users, or the public.
6. Your Rights and Choices
BIShare has no user accounts, so there is no profile, password, or stored personal data tied to you. You retain the following control over your data:
No Account
BIShare does not require an account. There is no profile or stored personal data to access, correct, or delete.
Local Transfers Collect Nothing
Files sent over your local network go directly between devices and never reach our servers, so nothing is collected.
Revocation
Revoke any active share link or transfer code at any time.
Automatic Deletion
Remote transfer files are deleted automatically after 24 hours, or immediately after the first download for one-time links.
7. Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.
8. International Data Transfers
Our servers are located in the Asia-Pacific region. If you access the Service from outside this region, please be aware that your data may be transferred to, stored, and processed in a different jurisdiction. By using the Service, you consent to the transfer of information to countries that may have different data protection laws than your country of residence.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: