Simplesync is a local-first companion app that syncs photos, videos, and files between your phone and your desktop over your local network. We do not upload or store your synced content in the cloud. Your synced content is transferred only between devices you pair. Optional diagnostic reports are uploaded only when you explicitly choose Send report.
Information we collect and use
1) Content you choose to sync or download
Photos, videos, and other files you select.
File metadata such as file name, size, type, album or folder name, and modification time.
Local identifiers and paths (album IDs, asset IDs, file paths) for the items you select.
A file hash and size used to detect duplicates.
We use this information to transfer files, avoid duplicates, and show sync progress.
2) Device, pairing, and connection data
A random device ID generated on your phone.
Device name or model and platform (Android or iOS) shown on the desktop.
Desktop IDs and connection metadata (host/IP and port).
Pairing tokens, upload keys, and (if enabled) TLS certificate fingerprints.
Last connected timestamps and sync state shared with the desktop.
We use this information to authenticate and maintain the local connection.
3) App state and preferences (stored locally on your phone)
Selected album IDs, selected file paths, and selected desktop IDs.
Sync state, counts, timestamps, and last error messages.
Settings such as sync mode, battery saver, and notification preferences.
We use this information to resume syncs and remember your choices.
4) Received file metadata
When your desktop sends files to your phone, we store file IDs, names, sizes, content types, and download tokens to show them in the app.
5) Optional diagnostic support reports
If you choose Report a problem and then Send report, the app uploads a ZIP containing redacted mobile and desktop diagnostic events, connection and sync state, app/platform versions, a random capture ID, and any description you enter.
Diagnostic reports are used only to investigate support issues. Secrets, authentication values, local paths, file names, and device identifiers are redacted before the report is created.
Sending a report is optional and requires your confirmation.
6) Direct APK purchases
If you purchase Premium in the directly distributed Android APK, Stripe processes your payment details. SimpleSync receives the payment status and stores a device-linked lifetime entitlement; SimpleSync does not receive or store your full card number.
Where data is stored
On your phone: app local storage (SharedPreferences), app cache, temporary files, and the app documents directory.
If you download images or videos, they may be saved to your photo library (for example, Pictures/Simplesync on Android) when you grant permission.
On your desktop: synced files are stored in the desktop library folder you choose (default: your Pictures/Simplesync folder). The desktop app also stores local metadata such as the device list, transfer history (up to 200 entries), upload sessions, and dedupe index in a ".simplesync" folder in your home directory.
Optional diagnostic reports are stored privately using Cloudflare D1 and R2 for up to 60 days, then deleted.
Data sharing
We do not sell your personal information.
We do not share your synced content with third parties. Your synced content is transferred only between your phone and your paired desktop over your local network.
We only share limited technical data with third-party services when needed to deliver app functionality (for example, downloading fonts), as described below.
Third-party services
We do not use third-party advertising services. We do use limited first-party anonymous desktop install and activity analytics.
Cloudflare hosts the website, feedback database, and private diagnostic report storage. Cloudflare processes network information under its own privacy terms when a report is submitted.
Stripe processes one-time Premium payments made in the directly distributed Android APK under Stripe's privacy terms.
We use Google Fonts for typography. The app may download font files from Google (fonts.googleapis.com / fonts.gstatic.com) and cache them locally, which may expose your IP address to Google as part of the request.
The app is distributed through app stores (Google Play, Apple App Store), which may collect information under their own policies.
Network and security
Pairing uses a QR code or short code and issues upload keys for authentication.
Transfers use WebSocket and HTTP on your local network.
If TLS is enabled by the desktop app, connections can use HTTPS or WSS with certificate fingerprint checking. If TLS is not enabled, transfers are unencrypted on the local network. Use a trusted network.
Data retention and deletion
You can stop sharing by unlinking devices or uninstalling the app.
Local app data (pairing info, selections, caches) is removed when you clear app data or uninstall.
Synced files remain on your desktop until you delete them.
The desktop app keeps device records based on its retention setting (default 90 days) and keeps transfer history and dedupe data locally until you delete it. Upload sessions for resumable transfers are removed after about 24 hours.
Permissions
Camera: scan QR codes to pair devices.
Photos, media, and storage: access and upload selected photos, videos, and files; save received media to your library.
Local network and Wi-Fi state: discover and connect to your desktop.
Notifications (Android): keep background sync running and show a required foreground notification.
Battery optimization and foreground service (Android): keep sync active in the background.
Children's privacy
Simplesync is not directed to children and does not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The last updated date will be updated when changes are made.
Contact
For privacy questions, contact the developer at simplesyncapp@gmail.com.