Privacy

Version of 3 October 2026

Sandyk keeps your photos, files and contacts on a server you choose: ours, a friend's or your own at home. This page says which data goes where and who can see it.

What is on the server

The server the app is connected to stores:

• the photos, videos and files you send, with their details: when a photo was taken, where (if the photo records it), its size;
• a copy of your contacts, if you saved one;
• your email, the names of the devices you signed in from, and your settings.

If the server is yours or someone else's, its owner gets this data, not us. If you use our server, we store it and use it only to show it and give it back to you.

With end-to-end encryption, photos and videos are encrypted on the phone before they are sent. The server, ours included, stores them but cannot open them.

Sandyk account

Signing in with Apple or Google creates a Sandyk account. In it we keep:

• the email and name Apple or Google gave us, and their identifier for your account;
• the servers you signed in to with the account;
• encryption keys, if encryption is on: the key encrypted for each of your devices, and a recovery copy encrypted with our recovery key.

The recovery copy is there so you don't lose your photos if you lose every device. It technically lets us recover the key, so we keep the recovery key separately and use it only when you restore access yourself by signing in to your account.

Relay

If a server has no public IP address, the connection goes through our relay. It sees the server's name and IP addresses, not the content: encryption ends at your server.

Links

Anyone who has a public link can open it. Set a password if a link might reach the wrong people, and delete it when it's no longer needed.

Payments

In-app purchases go through the App Store or Google Play: they get your card details, we get only a record of the purchase. Server owners who sell space give details for payouts. We don't keep full card numbers, only the holder's name, the last digits and the country, and for crypto the wallet address and network.

What we don't do

• We don't show ads or sell data.
• We don't put trackers or third-party analytics in the app.
• We don't look at your photos and files.

Deletion

You delete files in the app. They stay in the trash for 30 days and are then deleted for good. You delete your Sandyk account in the app: Settings → Account → Delete account. It can go now or after 30, 60 or 90 days, and you can change your mind until then. The servers you signed in to with the account are notified and delete your data there.

Children

Sandyk is not meant for children under 13 without a parent's consent.

Changes and contact

We'll tell you in the app about significant changes to this policy. Questions: privacy@sandyk.app.