Privacy Policy
Effective date: November 8, 2026
Gondoly lets you send files, photos, videos, text and links between your own devices and other people's devices. This policy explains what information we handle, why, and the choices you have. We wrote it to be read, not skimmed past.
Who we are
Gondoly is operated by Ari Zanuto, an individual based in Brazil ("Gondoly", "we"). For anything about privacy, write to privacy@gondoly.com.
The short version
- We never see your files. Transfers are encrypted end to end between the two devices. File contents, file names, and the text and links you send never reach our servers in readable form.
- On the same network, files go straight between the devices. Across networks, they may pass through a relay, still encrypted.
- We keep only what we need to run the service: your account, your devices, your plan, and usage metadata such as counts, sizes, durations and error reasons.
- We don't sell your data and we don't show ads.
Information we handle
Account. Your email address, and your name if you sign in with Apple or Google. Your language preference. If you use Sign in with Apple and choose to hide your email, we receive a relay address from Apple.
Devices. For each device you sign in on: a name such as "Chrome · Mac", the platform, the app version, and the device's public encryption keys. Public keys let other devices confirm they are talking to the right device. Private keys never leave your device.
Subscription. Your plan (Free, Pro or Teams), its status and renewal dates. Payments are processed by Apple, Google or Paddle; we never receive your card number.
Usage metadata (telemetry). Events such as "transfer completed" or "pairing failed", with counts, total sizes, durations, the type of connection, the platform and app version, an approximate country derived from your IP address, and the reason when something fails. Telemetry never includes file contents, file names, text, links or the names of the other person's devices. The IP address itself is not stored with telemetry.
Usage statistics (Google Analytics). On gondoly.com and gondoly.app only if you accept the cookie notice, and in the apps without any advertising identifier: the pages or screens you visit (never the full address), where you came from (for example, an ad campaign), an approximate country, the type of device and the same events as the telemetry above. We never send your email, your account ID, file names or any content. Google signals and ad personalization are off.
Connection data. To connect two devices, our pairing server and, when needed, the relay see the devices' IP addresses for the duration of the connection. The pairing server compares the two public addresses to tell whether the devices are on the same network.
Synced history (Pro). If you use synced history, the list of what you sent and received is encrypted on your device with a key only your devices have. We store it but cannot read it.
Teams contact form. Name, work email, company, country, team size and what you wrote, used only to reply to you.
Sign-in emails. We send you a sign-in code by email. We do not send marketing emails.
What we don't do
We don't read, scan or analyze the files you send. We don't sell or rent personal information. We don't use your information for advertising or to build advertising profiles. We don't use the content of your transfers to train any model.
Why we use information (and legal bases)
- To provide the service (account, devices, pairing, transfers, plans): necessary to perform our contract with you.
- To keep it secure and prevent abuse (rate limits, fraud prevention, abuse reports): our legitimate interests.
- To understand and improve reliability (telemetry metadata): our legitimate interests. We limit it to metadata and keep it for a limited time.
- To comply with the law (tax records for payments, lawful requests): legal obligation.
These bases are those of the Brazilian General Data Protection Law (LGPD) and, where applicable, the EU and UK GDPR.
Service providers
We use a small number of providers who process data on our behalf, under contracts that limit what they can do with it:
- Supabase: accounts, device directory and database.
- Cloudflare: website and app hosting, the pairing server and the relay.
- Resend: sending sign-in emails.
- RevenueCat: keeping your subscription status in sync across platforms.
- Paddle: selling subscriptions on the web, as merchant of record (Paddle handles payment and taxes).
- Google (Google Analytics and Firebase): usage statistics for the websites and apps.
- Apple and Google: sign-in, and payments made through the App Store or Google Play, under their own privacy policies.
Some of these providers process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
How long we keep information
- Account, devices and plan: while your account exists. When you delete your account, we delete them within 30 days, except records we must keep by law (such as invoices).
- Telemetry: 24 months, then deleted.
- Synced history (Pro): until you delete it or your account.
- Teams contact form: up to 24 months after our last conversation.
- Backups: removed from backups as they rotate, within 30 days.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal information, object to or restrict certain uses, and withdraw consent where we rely on it. You can delete your account in the app at any time. For any other request, write to privacy@gondoly.com and we will answer within the time the law requires. You can also complain to your data protection authority; in Brazil, the ANPD.
Children
Gondoly is not directed to children under 13 (or the minimum age required in your country). If you believe a child gave us personal information, contact us and we will delete it.
Security
Transfers use end-to-end encryption (the Noise protocol) with keys that stay on your devices. Our servers use encrypted connections, access controls and row-level security in the database. No system is perfectly secure, but we design Gondoly so that even if our servers were compromised, your files would not be exposed.
Changes
If we change this policy in a meaningful way, we will tell you in the app or by email before the change takes effect. The effective date at the top always shows the current version.