Legal
Privacy Policy
Last updated 28 September 2026
The short version
- Your files go straight from your iPhone to your PC across your own network. They are never uploaded to me.
- Your notifications are shown on your PC and never stored on a server.
- I keep an account, your settings, and a list of what you transferred - not the contents.
- Nothing is sold, rented or shared with advertisers. There are no ad or analytics trackers in the app.
- Ask and everything is deleted. support@bridgesyncapp.com
Who is responsible for your data
BridgeSync is built and operated by Marcell Béres, an individual developer based in Hungary, acting as the data controller for the purposes of the UK and EU General Data Protection Regulation.
For any privacy question or request, write to support@bridgesyncapp.com. That address reaches the developer directly. If you need the controller's registered postal address for a formal regulatory request, it will be provided on request to that address.
What BridgeSync collects
BridgeSync collects the minimum needed to run an account across two devices. Everything below is tied to your account and nothing else is gathered in the background.
| Data | Why | Legal basis |
|---|---|---|
| E-mail address and password | To create your account and sign you in on both devices. Passwords are stored only as a salted hash - they cannot be read, by me or anyone else. | Contract |
| Your first name, last name and username | Required at sign-up. They identify your account to you and label your devices across the app - there is no way to use BridgeSync without them. | Contract |
| Date of birth | Required at sign-up, for one reason: to confirm you are old enough to consent to an account yourself. See Age below. | Legal obligation |
| Profile picture | Genuinely optional, and the only thing here that is. Added after sign-up if you want one; the app is complete without it. | Consent |
| Device name, model, battery level, online status, local network address, and each device's public encryption key | So your iPhone and PC can find each other on your network, show whether the other one is reachable, and set up end-to-end encryption. The matching private keys never leave your devices. | Contract |
| Transfer history: file names, file sizes, timestamps, which device sent or received, and a log of the PC commands you sent and your clipboard syncs | To show your history and let you re-open a received file. File and clipboard contents are never included. | Contract |
| App settings and preferences | So your choices follow you between devices. | Contract |
| Subscription status and purchase receipts | To unlock Pro features and restore them on a new device. Handled by Apple and RevenueCat. | Contract |
| Apple push notification token | To wake the iPhone app when your PC needs to reach it. | Contract |
| IP address and connection logs | Seen by the hosting providers whenever your devices connect, and kept only in short-lived server logs for security and abuse prevention. | Legitimate interest |
| Waitlist e-mail address (only if you joined the waitlist) | To tell you when BridgeSync launches and to mark your account as a Founding User. Ask and it is deleted. | Consent |
What BridgeSync never collects
- The files you transfer. They travel directly between your two devices over your own Wi-Fi. They never pass through, and are never stored on, any server of ours.
- The contents of your notifications. They are delivered from your iPhone to your PC over a direct Bluetooth connection, displayed, and discarded. They are never uploaded.
- Your clipboard contents beyond passing them between your own two devices.
- Your screen. Screen mirroring is a direct connection between your devices. Nothing is recorded and nothing is sent to me.
- Your location, contacts, photos library, browsing history or keystrokes.
- Crash reports or usage analytics. BridgeSync contains no crash-reporting or analytics SDK. Nothing reports back about how you use the app.
- Advertising identifiers. There are no advertising SDKs in BridgeSync, and nothing here is used to track you across other apps or websites.
How your data is used
Only to operate the service. Specifically: to authenticate you, to pair your devices and keep them in sync, to show your history and settings, to unlock features you have paid for, and to answer your support requests.
Your data is never sold, rented, or shared for advertising, and it is not used to train machine-learning models.
Who else processes your data
A small number of service providers handle data on my behalf. Each is bound by a data-processing agreement and may only act on my instructions.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Account, database and authentication hosting, including sign-up confirmation and sign-in e-mails | EU |
| RevenueCat | Subscription and entitlement management | USA |
| Apple | App Store purchases and push notifications | Global |
| Hostinger | Website and desktop update hosting | EU |
| Stripe (via RevenueCat) | Payments for Pro bought on the web | USA / EU |
| Expo | Delivers updates to the iPhone app | USA |
Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses.
How long it is kept
- Account data - for as long as your account exists.
- Transfer history - until you delete it. You can clear individual entries or the whole history from inside the app at any time.
- After account deletion - immediately. Deleting your account from the iPhone app erases your profile, devices, settings and history on the spot; there is no 30-day grace period and no recovery. The only exception is purchase records, which I am legally required to retain for tax purposes.
Your rights
Under the GDPR you can, at any time:
- Ask for a copy of everything held about you
- Have anything inaccurate corrected
- Have your account and data erased
- Ask me to restrict or stop processing
- Receive your data in a portable, machine-readable format
- Withdraw consent for anything you gave consent for
E-mail support@bridgesyncapp.com and it will be handled within 30 days, free of charge. You also have the right to complain to your local data protection authority; in Hungary this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
Security
Connections to my servers use TLS. Passwords are stored as salted hashes. Access to the production database is restricted to the developer and protected by row-level security rules, so one account can never read another's data. Direct transfers between your devices stay on your local network and never traverse the public internet. Your files, clipboard and PC commands are end-to-end encrypted between your devices, with keys that are created on your devices and never leave them.
Age
BridgeSync is a utility and anyone can use it. This section is about who can hold an account, not about who is allowed to send a file.
Creating an account means handing over personal data, so you must be at least 13 to create one. In Hungary and much of the EU the age for agreeing to that on your own is 16, so if you are younger than that there, a parent or guardian has to agree first.
That is the entire reason your date of birth is required at sign-up. It is not used to profile you, it is not shared, and it drives nothing else in the app - it exists so the age rule above is actually enforced: the app will not create an account for anyone under 13. If you believe an account was created by a child without a guardian's consent, contact me and it will be deleted.
Changes to this policy
If this policy changes materially, the date at the top is updated and I will tell you by e-mail or in the app before the change takes effect. Continuing to use BridgeSync after that means you accept the revised policy.
Contact
support@bridgesyncapp.com
Marcell Béres, Hungary