Last updated 2026-07-11 · Applies to the v0.1.0-beta.x private beta
Bifrost is built privacy-first: it is peer-to-peer, and your files never pass through or get stored on our servers in readable form. This policy explains the small amount of coordination data the service does handle.
The short version
Your files stay yours. They transfer directly, device-to-device, and are end-to-end encrypted. When a direct connection isn't possible, an encrypted relay forwards the bytes — it cannot read them.
We do not sell data, run ads, or use third-party tracking/analytics.
The only data we hold is what's needed to find your friends, show who's online, deliver friend requests, and run the community board.
What stays only on your device
Your identity key (Ed25519), stored in your OS keychain.
Your shared-folder list, contacts, transfer history, and local database.
Downloaded files and the media stream cache.
What our relay holds (coordination server)
To let people find and reach each other, the relay stores:
Your username, peer ID, and display name (the public directory).
Presence — whether you're currently online (auto-expires).
Friend connections and pending friend requests / handshakes (so they survive while you're offline).
Aggregate counters (e.g. total users) — no per-file or per-action detail.
The relay never receives your file names or file contents in readable form.
What Firebase holds (community + dashboard)
If you link your identity (required to post), Firebase stores your Pulse activity — posts, comments, votes, and app ratings — tied to your peer ID and a Firebase identity claim, plus your username reservation. This is the data that powers the in-app community board and our admin dashboard.
Early-access sign-ups
If you request early access on our site, we store the email address you submit (with a timestamp) solely to send you a beta invite. Email connect.bifrost@gmail.com any time to have it removed.
Diagnostics & crash reports
Bug/feature posts you submit via Pulse include your app version, OS, and environment (shown on the post) so we can triage. You choose to submit these.
Crash reports are sent via Sentry and are scrubbed of file names and paths. You can turn this off in Settings → Advanced.
If you email us a report, it contains whatever you choose to include (and the diagnostics line we pre-fill).
Beta data handling
This beta runs against a staging environment. Data may be reset between beta builds. Don't rely on the beta to retain anything.
Deleting your data
You can remove your account/directory record (username, profile, friend edges, identity claim, presence) in-app: Settings → Advanced → Delete account. If the app can't launch, email connect.bifrost@gmail.com and we'll remove it. Files on your own devices are always yours to delete locally.