Privacy policy

Transferit is an app for iOS and Android that sends large files by link and sends PDF documents out for signature, made by The It Group. This policy explains what Transferit does with your information, in the order it matters.

The short version

• Transferit collects only what the service needs to work. The whole list is below — there is nothing beyond it.
• The only third-party services involved are: Stripe, which takes payment for paid plans and holds the card details Transferit never sees; Cloudflare R2, the storage the files themselves live in — they go there straight from your phone, and are deleted when the link expires or you delete it; Resend, which delivers the transfer and signature emails: it sees the addresses and the link, never the files; Neon, which runs the database in London that holds the records about transfers — who sent what to whom, when it expires, and who signed a document and when. The files themselves are never in it; Vercel, which runs Transferit's website and service from London. The files do not live there either; Apple and Google, whose sign-in you may use — Transferit never sees a password.
• Your data is never sold, and never used for advertising or tracking.

What Transferit collects

Only what the service needs to work — and if you never sign in, almost none of this happens at all:

• the files you send, with the title, message, expiry, password and download limit you set; they are deleted when the transfer expires
• the email addresses you send a transfer or a signature request to, so each person can be sent their own link
• your email address, and your name if you give one, when you create an account or sign in with Apple or Google
• for a signature request: the marks each signer makes, their consent, the time, a scrambled form of their network address and their device, which go into the certificate of completion
• a scrambled form of the network address of anyone who downloads, kept to enforce download limits and rate limits
• if you take a paid plan, the brand and last four digits of your card so you can recognise it — never the full number, which only Stripe sees

Where your data lives

Transferit needs servers, because more than one person has to see the same thing. Your data is held by the services named below and by nobody else, and it is not moved, sold, or shared beyond what the service itself requires.

Third parties

Transferit uses these services, and each receives only what it needs to do its job:

• Stripe, which takes payment for paid plans and holds the card details Transferit never sees
• Cloudflare R2, the storage the files themselves live in — they go there straight from your phone, and are deleted when the link expires or you delete it
• Resend, which delivers the transfer and signature emails: it sees the addresses and the link, never the files
• Neon, which runs the database in London that holds the records about transfers — who sent what to whom, when it expires, and who signed a document and when. The files themselves are never in it
• Vercel, which runs Transferit's website and service from London. The files do not live there either
• Apple and Google, whose sign-in you may use — Transferit never sees a password

There are no advertising SDKs and no trackers in the app.

The App Store

If you download Transferit from Apple’s App Store, Apple may provide us with aggregated, anonymised statistics — download counts and crash reports, for example. These contain no personal information and cannot be traced back to you by us.

Deleting your data

You can delete your account from inside Transferit at any time — no email, no waiting, no retention offer. Where the law requires the financial record of a completed transaction to be kept, that record is stripped of anything identifying you before it is retained.

Children

Transferit is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has given us information, tell us and we will delete it.

Your rights

UK GDPR applies. You may ask for access to your data, ask for it to be corrected or deleted, and object to how it is used. Write to us and we will answer within one month.

Changes to this policy

If Transferit ever changes how it handles data, this page will be updated first and the effective date above will change. A promise kept simple: if the app starts collecting something, this policy will say so plainly before it does.

Contact

Questions about this policy or about Transferit: theitgroupapps@gmail.com