Privacy Policy

Last updated: November 10, 2026

SecureShare is an app by Lennox Digital ("we") for sending files and notes with end-to-end encryption. This policy explains what the app keeps on your device, what reaches our servers, and how to delete it.

The short version

• Files and notes you send are encrypted on your device before they're uploaded. The key is only in the link, after the #, which is never sent to us. We can't read what you send.
• Sending needs a free Lennox Digital account; receiving never does. We store the sender's email address, an account id and which Pro products they own, and which account made each share. The person you send to doesn't need an account, and we don't learn who they are.
• There are no ads, no analytics and no trackers in the app.

What stays on your device

• The list of shares you've made, including each full link (with its key) so you can copy it again. The app is excluded from phone backups and device transfers, so these never leave the phone. Clearing the list in Settings, or uninstalling the app, removes them.
• Your settings (theme, default expiry and download limit, whether to remove photo details).
• Passwords you add to shares. A generated password is shown once and isn't stored.
• Secret notes: the text isn't kept on your device after you send it.
• Camera images used to scan a QR code are read on the device and never saved or uploaded.
• Photo details (GPS location, camera make and model, dates, comments) are removed from JPEG and PNG photos on your device before encrypting, when that option is on. It's on by default.

What reaches our servers when you share

When you create a share (signed in), the app uploads two encrypted blobs and the server keeps a small record:

• Encrypted data: your files (or note), and a separate encrypted summary of their names, types, sizes, your message and, with Pro, your name. We can't decrypt either one.
• The share record: a SHA-256 hash of the share id (the id itself works like a password for the recipient, so we don't store it), the account that made it, the encrypted sizes, when it was created and expires, how many downloads are allowed and how many have happened, and its status.
• Usage totals per account: how much encrypted data your active shares hold and how much was downloaded this month, to apply the plan limits.
• IP addresses: our servers see the IP address of each request. For rate limits and abuse reports we store only a SHA-256 hash of it, never the address itself, and don't use it to work out where you are.
• Abuse reports: if someone reports a share, we keep the share's hashed id, the reason, any details they write, a hash of their IP address and, if they were signed in, their account id, so we can review it. Three reports from different signed-in accounts take a share down automatically.

We never receive the link key or the password, and we don't learn whether a share has a password.

Deletion: the link stops working when it expires, when its download limit is reached, or when you delete it in the app. Deleting in the app removes the encrypted data at once; after an expiry or the last download it's deleted within about 30 minutes (so a download in progress can finish). A share taken down after abuse reports keeps its encrypted data, which we still can't read, until its normal expiry, so the report can be reviewed. The share record (without any content) is kept for up to 30 days after a share ends, so a recipient sees "this link expired" rather than an error, then deleted.

Anyone who has the whole link (and the password, if one was set) can open a share. Send links only to the people they're for.

Hosting: Supabase (Amazon Web Services, us-east-1, United States). It stores only the encrypted data and the records described above.

Lennox Digital account (needed to send)

You can sign in with Google, Apple (on iPhone) or a one-time code sent to your email, to use your Pro purchases in every Lennox Digital app. Sign-in with Google or Apple sends us your email address and an account identifier from that provider; we don't receive your Google or Apple password. If you sign in, we store:

• your email address and an account id,
• which Lennox Digital products you've bought and when they renew or expire (the store's purchase record, checked with Google Play or the App Store).

The account is stored with Supabase (Amazon Web Services, United States).

Each share you send is linked to your account, so we can apply your plan's limits, handle abuse reports and let you delete it. You can delete your account in Settings → Account → Delete account; this removes your email, account id and purchase records from our systems, and your shares stop working and their encrypted data is deleted. Store subscriptions must also be cancelled in Google Play or the App Store.

Purchases

Subscriptions are processed by Google Play (or Apple on iOS). We never see your card details. We receive a purchase record (product, purchase token, renewal status) so Pro unlocks on your devices.

Sharing with others

We don't sell or share your data with advertisers or data brokers. We disclose data only to the service providers above, which process it for us, or when the law requires it. Because shares are end-to-end encrypted, we can only ever hand over encrypted data and the share records described above.

Children

SecureShare isn't designed for children under 18 and we don't knowingly collect data from them.

Your rights

You can ask for a copy of, or deletion of, any data we hold about you by emailing us. Most data can be deleted directly in the app, as described above.

Changes

If we change this policy we'll update the date above and, for significant changes, tell you in the app.

Contact

Lennox Digital · support@lennoxdigitallabs.com · https://www.lennoxdigitallabs.com/apps/secureshare/