Privacy Policy

Last updated: February 22, 2026

PeerDrop ("we", "our", or "the app") is a peer-to-peer communication app that enables direct device-to-device file transfer, messaging, and voice calls over your local network. Your privacy is fundamental to how PeerDrop is designed.

Our Core Principle

PeerDrop is built around a simple principle: your data stays on your devices. We do not operate any servers, cloud storage, or analytics services. All communication happens directly between devices on your local network.

Data We Do NOT Collect

• We do not collect, store, or transmit any personal data to external servers.
• We do not use analytics, tracking, or advertising frameworks.
• We do not access your contacts, location, or browsing history.
• We have no user accounts, registration, or sign-in.

Data Stored Locally on Your Device

The following data is stored exclusively on your device and never leaves it unless you explicitly share it with a connected peer:

• Chat messages: Encrypted with AES-256-GCM and stored in the app's sandboxed Documents directory.
• Shared media: Photos, videos, and voice messages you send or receive are encrypted and stored locally.
• Saved devices: Device names and identifiers of peers you choose to save for quick reconnection.
• Display name: The name you set to identify yourself to other peers.
• Preferences: App settings such as feature toggles and display preferences, stored in UserDefaults.

Network Communication

• Local network only: PeerDrop discovers nearby devices using Bonjour (mDNS) on your local Wi-Fi network. No internet connection is required.
• Encrypted connections: All peer-to-peer connections use TLS encryption. Certificate fingerprints are displayed for trust-on-first-use verification.
• No external servers: Messages, files, and voice calls are transmitted directly between devices. No data passes through our servers or any third-party service.
• WebRTC: Voice calls use WebRTC for direct peer-to-peer audio. No STUN/TURN servers are used; connections are established directly on the local network.

Device Permissions

PeerDrop requests the following permissions, each used solely for the stated purpose:

• Local Network: To discover and connect to nearby devices.
• Microphone: To enable voice calls and voice message recording.
• Camera: To capture photos for sharing in chats.
• Photo Library: To select photos and videos for sharing in chats.

Data Security

• All stored chat data is encrypted using AES-256-GCM.
• Encryption keys are derived from your device and stored in the iOS Keychain.
• Network connections use TLS 1.2 or higher with ephemeral P-256 key pairs.
• File integrity is verified using SHA-256 hashes.

Data Deletion

You can delete all app data at any time by:

• Deleting individual chat histories within the app.
• Removing saved devices from your library.
• Uninstalling the app, which removes all locally stored data.

Children's Privacy

PeerDrop does not knowingly collect any data from children. Since the app does not collect any personal data from any user, it is compliant with COPPA and similar regulations.

Third-Party Services

PeerDrop does not integrate with any third-party analytics, advertising, or data collection services. The only third-party dependency is the open-source WebRTC framework, which is used solely for local peer-to-peer audio communication.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date.

Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository.