Draft: this text is waiting for a final check before it is relied on.

Privacy policy

Last updated 24 October 2026

This explains what Transmit keeps about you, why, how long, who else handles it, and what you can do. We have written it to be understood by anyone aged 13 or over. [[TO CONFIRM: LLC name and registered address]] is the controller of your data. Contact: [email protected].

What we keep and why

What	Why	Basis
Your email, name and profile picture from Google, and the username you choose	To sign you in and show who you are to your friends	Needed to provide the service
Your date of birth (we keep that you are 13 or over, and the date to work out when a block lasts if you are younger)	To keep under-13s off the service	Legal duty and protecting children
Messages, files, reactions and voice-channel presence	To deliver them to the people you send them to	Needed to provide the service
Friends, servers you belong to, settings and drafts	To make the app work the way you set it	Needed to provide the service
Your sign-in session (the kind of device, and when it was last used). Your device's network address is kept only as a scrambled (hashed) value that cannot be turned back into the address	To keep you signed in securely and to protect the service from misuse	Legitimate interests (security)
That you agreed to the Terms of service and Privacy policy, which version, and when	To show the agreement was made, and to ask again when the terms change	Needed to provide the service; legitimate interests
Notification tokens for devices you allow	To send notifications you have switched on	Your consent
Reports and what we decided, and any appeal you send	To keep the service safe, to explain our decisions, and to look again when you ask	Legitimate interests; legal duties

We do not use your data for adverts, we do not sell it, and we do not track you across other websites. We do not read private conversations unless someone in them reports a message.

How long we keep it

Your account and messages: until you delete your account, or it is deleted after a year of not being used (we email you twice first).
When you delete your account: it is hidden for a waiting period (14 days by default) in case you change your mind, then your profile, files, notification tokens and sign-ins are erased. Your messages are removed, or kept without your name as "Deleted user", as you chose.
Notification tokens: until you turn notifications off or sign out of the device, and removed after 90 days of the device not opening the app.
Sign-in sessions: up to 30 days. Drafts: 30 days. Our security log: 90 days. Short-lived counters that limit how fast someone can try to sign in use the hashed address and last minutes.
Files: a file goes when the message it was sent in is deleted (unless a copy someone forwarded still shows it). A file you attach but never send is removed after a day. Files that are not pictures are removed after 90 days unless a server chooses to keep them.
A report of child sexual abuse material to the authorities: the reported message and the details we hold about the account are kept for a year after we send the report, even if the account is erased in the meantime, because the law requires us to report it. [[TO CONFIRM: with your solicitor.]]
Appeals: the link in a notice lasts 30 days. An appeal, with what you wrote, is kept for a year after it is answered.
Reports: kept for up to a year after they are closed. [[TO CONFIRM: retention for reports about illegal content, and when we must keep them for the authorities.]]
A record that an account was erased: we keep a scrambled (hashed) version of the email address and counts of what was removed, so that we can show a deletion happened if you ask, and so a restored backup does not bring you back. It cannot be turned back into your email address.
Backups: [[TO CONFIRM: how long backups are kept; erased accounts are removed again if a backup is ever restored.]]

Who else handles your data

We use these services to run Transmit. Each only gets what it needs.

OVH: the servers that run Transmit. Voice and video travel directly between your device and these servers, not through anyone else.
Cloudflare: sits in front of the website, the app and live connections (WebSockets) for network, security and DNS, and sends and receives our email, including the account emails we send you (such as deletion and safety notices) and mail you write to us. We send no marketing.
MongoDB Atlas: the database.
Backblaze B2: the files you send, and the downloads for the desktop app and its updates (the app contacts Backblaze to fetch an update).
Google: sign-in, and checking links in messages against Safe Browsing.
Firebase Cloud Messaging (Google): delivering notifications.

[[TO CONFIRM: where each of these stores data and the legal safeguards used for transfers outside the UK and EU.]]

Cookies

We use one cookie to keep you signed in. We do not use advertising or analytics cookies, and this website sets none.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it elsewhere. Most of this you can do yourself in your account settings: download your data, edit your profile, or delete your account.

Downloading your data has a wait, on purpose. When you ask, we email you straight away and tell your other signed-in devices. The file is ready after 48 hours, and you can cancel from any device before then. The wait is there so that someone who got into your account cannot take all your data at once without you finding out. Once it is ready you have 7 days to download it, up to 5 times.

For anything else write to [email protected] and we will reply within a month.

If you are not happy with how we handled your data you can complain to the Information Commissioner's Office (ico.org.uk), or to your local data protection authority.

Young people

You must be 13 or older. A parent or guardian can ask us to delete a young person's account by writing to us. We check the request is genuine before we act, and the account is suspended for a week before it is erased so a mistake can be undone.

Changes

If we change this policy in a way that matters we will tell you in the app first.