Your things stay
your things.

Account information

When you sign in with Apple or Google, Nyft receives the information needed to create and maintain your account. This can include your account identifier, email address, display name, sign-in provider, and authentication session information. Nyft does not receive your Apple or Google password.

Device information

Nyft stores an installation identifier, device name, platform, public identity key, trust status, and timestamps such as when a device was last seen. The device name can be one provided by your operating system, or a name you choose in Nyft.

Notification routing

If notifications are enabled, Nyft stores an Apple Push Notification service token and its environment. An offline-transfer notification can include the sending device name and the number of items waiting. It does not include filenames, clipboard text, or file contents.

Transfer content is kept on the devices involved in the transfer. Nyft may also keep local activity and clipboard history so the app can show recent items and resume your workflow. Local history can include filenames, item sizes, device names, dates, transfer status, local file locations, and clipboard text or links.

Nearby devices discover each other over the local network. Before a transfer begins, Nyft verifies the device identity associated with your account. The devices establish a temporary Curve25519 shared secret, encrypt transfer data with ChaCha20-Poly1305, and use SHA-256 to check file integrity.

No security system is perfect. Keep your operating systems current, protect access to your devices, and remove any device from your Nyft account if you no longer recognize or control it.

• Local transfer activity is kept for 7 days by default.
• Local clipboard history is kept for 3 days by default.
• Temporary staged transfer copies are normally cleaned up after 24 hours.
• You can change local retention settings, clear local history, rename devices, or remove devices.
• Account and registered-device information is kept while needed to provide Nyft and protect the account.

To request access, correction, or deletion of your account information, email support@nyft.app from the address associated with your account. Nyft may need to verify that the account belongs to you before completing the request.

Nyft uses a small number of service providers for account and delivery infrastructure:

• Supabase for authentication, account data, device registration, and server functions.
• Apple for Sign in with Apple, push notifications, and App Store distribution.
• Google when you choose Sign in with Google.
• Cloudflare for website delivery and network protection.

Nyft's account backend is currently hosted in Supabase's India region. Providers may process information in other countries under their own privacy terms and safeguards.

Website infrastructure can process standard network information such as your IP address, browser details, requested page, and request time for delivery, reliability, and security. Nyft does not combine this information with your app account for advertising.

Children

Nyft is not designed for children under 13, and Nyft does not knowingly collect personal information from children under 13.

Changes to this notice

This page will be updated when Nyft's data practices materially change. The date at the top shows when the notice was last revised.